← All advisories

Unrated severityNVD Advisory· Published Oct 22, 2008· Updated Jun 16, 2026

CVE-2008-4649

CVE-2008-4649

Description

Session fixation vulnerability in Elxis CMS 2008.1 revision 2204 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Elxis/CMS2 versions
cpe:2.3:a:elxis:elxis_cms:2008.1:revision_2204:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:elxis:elxis_cms:2008.1:revision_2204:*:*:*:*:*:*
- (no CPE)range: = 2008.1 revision 2204

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.