CVE-2007-2546 in Forum

Summary

Session fixation vulnerability in Simple Machines Forum (SMF) 1.1.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Reservation: 05/08/2007
• Disclosure: 05/09/2007
• Moderation: VulDB entry created
• Entries: 1: VDB-36658
• CPE: ready
• CWE: CWE-287 (Confirmed)
• CVSS: 7.3
• EPSS: 0.01447
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2007-2546
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2007-2546
• CVE Details: https://www.cvedetails.com/cve/CVE-2007-2546/