vendor:
BluePage CMS
by:
SecurityFocus
7.5
CVSS
HIGH
Session-Fixation
384
CWE
Product Name: BluePage CMS
Affected Version From: 2.5
Affected Version To: 2.5
Patch Exists: N/A
Related CWE: N/A
CPE: a:bluepage_cms:bluepage_cms
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008
BLUEPAGE CMS Session-Fixation Vulnerability
BLUEPAGE CMS is prone to a session-fixation vulnerability. Attackers can exploit this issue to hijack a user's session and gain unauthorized access to the affected application.
Mitigation:
Ensure that the application generates a new session identifier when a user authenticates to the application.