CVE-2007-3988

EPSS 0.88%
Veröffentlicht 25.07.2007 18:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Session fixation vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Virtual Hosting Control System ≫ Virtual Hosting Control System Version <= 2.4.7.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.88%	0.746

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

http://secunia.com/advisories/26142

Vendor Advisory

http://securityreason.com/securityalert/2926

http://www.majorsecurity.de/index_2.php?major_rls=major_rls51

http://www.securityfocus.com/archive/1/474324/100/0/threaded

http://www.securityfocus.com/bid/25006

https://exchange.xforce.ibmcloud.com/vulnerabilities/35548

https://nvd.nist.gov/vuln/detail/CVE-2007-3988

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2007-3988

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2007-3988

EUVD