Security Advisory
CVE-2008-6045
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Session fixation vulnerability in shopping_cart.php in xt:Commerce 3.0.4 and earlier allows remote attackers to hijack web sessions by setting the XTCsid parameter.