Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.

CVE-2008-6039 Details

Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URL	Source(s)	Tag(s)
http://secunia.com/advisories/31968	CVE	Not Applicable
https://exchange.xforce.ibmcloud.com/vulnerabilities/45323	CVE	Third Party Advisory
http://www.majorsecurity.de/index_2.php?major_rls=major_rls53	CVE	Exploit
http://www.securityfocus.com/archive/1/496582/100/0/threaded	CVE	Broken Link
http://www.securityfocus.com/bid/31315	CVE	Broken Link
http://secunia.com/advisories/31968	[email protected]	Not Applicable
https://exchange.xforce.ibmcloud.com/vulnerabilities/45323	[email protected]	Third Party Advisory
http://www.majorsecurity.de/index_2.php?major_rls=major_rls53	[email protected]	Exploit
http://www.securityfocus.com/archive/1/496582/100/0/threaded	[email protected]	Broken Link
http://www.securityfocus.com/bid/31315	[email protected]	Broken Link

CWE-ID	CWE Name	Source
CWE-287	Improper Authentication	[email protected]

Product	Versions
iss-oberlausitz bluepage cms	< 2.5.8
CPE cpe:2.3:a:iss-oberlausitz:bluepage_cms:::::::: Remediation No remediation found in references.

7 change records found show changes

QUICK INFO