VulnerabilityModified
CVE-2007-3988
Session fixation vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
MEDIUM 6.8EPSS 1.44%
Does this matter?
Lower severity and a low EPSS score (1.44%). Track it; it rarely justifies an emergency change on its own.
Description
Session fixation vulnerability in Virtual Hosting Control System (VHCS) 2.4.7.1 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
- CVSS 2.0
- 6.8 MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
- EPSS
- 1.44% probability · 72th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-287
- Affected
- virtual hosting control system/virtual hosting control system
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/26142Vendor Advisory
- http://securityreason.com/securityalert/2926
- http://www.majorsecurity.de/index_2.php?major_rls=major_rls51
- http://www.securityfocus.com/archive/1/474324/100/0/threaded
- http://www.securityfocus.com/bid/25006
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35548
- http://secunia.com/advisories/26142Vendor Advisory
- http://securityreason.com/securityalert/2926
- http://www.majorsecurity.de/index_2.php?major_rls=major_rls51
- http://www.securityfocus.com/archive/1/474324/100/0/threaded
- http://www.securityfocus.com/bid/25006
- https://exchange.xforce.ibmcloud.com/vulnerabilities/35548
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.