← All advisories

Unrated severityNVD Advisory· Published Feb 13, 2009· Updated Jun 16, 2026

CVE-2008-6128

CVE-2008-6128

Description

Session fixation vulnerability in moziloCMS 1.10.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

Affected products

21

Mozilo/Mozilocms21 versions
cpe:2.3:a:mozilo:mozilocms:*:*:*:*:*:*:*:*+ 20 more
- cpe:2.3:a:mozilo:mozilocms:*:*:*:*:*:*:*:*range: <=1.10.2
- cpe:2.3:a:mozilo:mozilocms:1.0:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.10:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.4:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.5:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.6:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.7:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.8:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.9:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.9.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.9.3:*:*:*:*:*:*:*
- (no CPE)range: <=1.10.2

Patches

Vulnerability mechanics

References

5

secunia.com/advisories/32021nvdVendor Advisory
cms.mozilo.de/index.phpnvd
www.majorsecurity.de/index_2.phpnvd
www.securityfocus.com/bid/31495nvd
exchange.xforce.ibmcloud.com/vulnerabilities/45526nvd

News mentions

0

No linked articles in our index yet.