CVE-2016-4309 in Symphony CMS
Summary
Session fixation vulnerability in Symphony CMS 2.6.7, when session.use_only_cookies is disabled, allows remote attackers to hijack web sessions via the PHPSESSID parameter.
Reservation
04/27/2016
Disclosure
06/30/2016
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 88545 | Symphony CMS race condition | 362 | Proof-of-Concept | Official fix | CVE-2016-4309 |