header-logo
Suggest Exploit
vendor:
BluePage CMS
by:
SecurityFocus
7.5
CVSS
HIGH
Session-Fixation
384
CWE
Product Name: BluePage CMS
Affected Version From: 2.5
Affected Version To: 2.5
Patch Exists: N/A
Related CWE: N/A
CPE: a:bluepage_cms:bluepage_cms
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2008

BLUEPAGE CMS Session-Fixation Vulnerability

BLUEPAGE CMS is prone to a session-fixation vulnerability. Attackers can exploit this issue to hijack a user's session and gain unauthorized access to the affected application.

Mitigation:

Ensure that the application generates a new session identifier when a user authenticates to the application.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/31315/info

BLUEPAGE CMS is prone to a session-fixation vulnerability.

Attackers can exploit this issue to hijack a user's session and gain unauthorized access to the affected application.

BLUEPAGE CMS 2.5 is vulnerable; other versions may also be affected.

http://www.example.com/BluePageCMS/?PHPSESSID=15031988