← All advisories

Unrated severityNVD Advisory· Published Apr 11, 2007· Updated Jun 16, 2026

CVE-2007-1951

CVE-2007-1951

Description

Session fixation vulnerability in onelook obo Shop allows remote attackers to hijack web sessions by setting a PHPSESSID cookie.

Affected products

2

Onelook/Oboshop2 versions
cpe:2.3:a:onelook:oboshop:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:onelook:oboshop:*:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

3

www.majorsecurity.de/index_2.phpnvdVendor Advisory
www.securityfocus.com/archive/1/464886/100/0/threadednvd
exchange.xforce.ibmcloud.com/vulnerabilities/33500nvd

News mentions

0

No linked articles in our index yet.