Sign in Subscribe

← All advisories

Unrated severityNVD Advisory· Published Feb 13, 2009· Updated Apr 23, 2026

CVE-2008-6128

CVE-2008-6128

Description

Session fixation vulnerability in moziloCMS 1.10.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

Affected products

20

Mozilo/Mozilocms20 versions
cpe:2.3:a:mozilo:mozilocms:1.1:*:*:*:*:*:*:*+ 19 more
- cpe:2.3:a:mozilo:mozilocms:1.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.1.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.3:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.4:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.5:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.6:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.6.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.6.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.7:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.8:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.9:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.9.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.9.2:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.9.3:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.10:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:1.10.1:*:*:*:*:*:*:*
- cpe:2.3:a:mozilo:mozilocms:*:*:*:*:*:*:*:*range: <=1.10.2
- cpe:2.3:a:mozilo:mozilocms:1.0:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

secunia.com/advisories/32021nvdVendor Advisory
cms.mozilo.de/index.phpnvd
www.majorsecurity.de/index_2.phpnvd
www.securityfocus.com/bid/31495nvd
exchange.xforce.ibmcloud.com/vulnerabilities/45526nvd

News mentions

0

No linked articles in our index yet.