Security Advisory
CVE-2008-4649
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Session fixation vulnerability in Elxis CMS 2008.1 revision 2204 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.