CVE-2008-6039
BLUEPAGE CMS 2.5 - 'PHPSESSID' Session Fixation
Severity Score
6.8
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
3
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Session fixation vulnerability in BLUEPAGE CMS 2.5 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
Vulnerabilidad de fijación de sesión en BLUEPAGE CMS v2.5 y anteriores, permite a atacantes remotos secuestrar sesiones web a través del parámetro "PHPSESSID".
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2008-09-22 First Exploit
- 2009-02-02 CVE Reserved
- 2009-02-03 CVE Published
- 2024-08-07 CVE Updated
- 2024-08-14 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-287: Improper Authentication
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/31968 | Third Party Advisory | |
| http://www.securityfocus.com/archive/1/496582/100/0/threaded | Mailing List | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/45323 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| https://www.exploit-db.com/exploits/32407 | 2008-09-22 | |
| http://www.majorsecurity.de/index_2.php?major_rls=major_rls53 | 2024-08-07 | |
| http://www.securityfocus.com/bid/31315 | 2024-08-07 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Bluepage Search vendor "Bluepage" | Bluepage Cms Search vendor "Bluepage" for product "Bluepage Cms" | <= 2.5 Search vendor "Bluepage" for product "Bluepage Cms" and version " <= 2.5" | - |
Affected
| ||||||
| Bluepage Search vendor "Bluepage" | Bluepage Cms Search vendor "Bluepage" for product "Bluepage Cms" | 2.4.0 Search vendor "Bluepage" for product "Bluepage Cms" and version "2.4.0" | - |
Affected
| ||||||