CVE-2008-6128

Session fixation vulnerability in moziloCMS 1.10.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Name	Vendor	Start Version	End Version
Mozilocms	Mozilo	*	1.10.2 (including)
Mozilocms	Mozilo	1.0 (including)	1.0 (including)
Mozilocms	Mozilo	1.1 (including)	1.1 (including)
Mozilocms	Mozilo	1.1.1 (including)	1.1.1 (including)
Mozilocms	Mozilo	1.2 (including)	1.2 (including)
Mozilocms	Mozilo	1.3 (including)	1.3 (including)
Mozilocms	Mozilo	1.3.1 (including)	1.3.1 (including)
Mozilocms	Mozilo	1.4 (including)	1.4 (including)
Mozilocms	Mozilo	1.5 (including)	1.5 (including)
Mozilocms	Mozilo	1.6 (including)	1.6 (including)
Mozilocms	Mozilo	1.6.1 (including)	1.6.1 (including)
Mozilocms	Mozilo	1.6.2 (including)	1.6.2 (including)
Mozilocms	Mozilo	1.7 (including)	1.7 (including)
Mozilocms	Mozilo	1.8 (including)	1.8 (including)
Mozilocms	Mozilo	1.9 (including)	1.9 (including)
Mozilocms	Mozilo	1.9.1 (including)	1.9.1 (including)
Mozilocms	Mozilo	1.9.2 (including)	1.9.2 (including)
Mozilocms	Mozilo	1.9.3 (including)	1.9.3 (including)
Mozilocms	Mozilo	1.10 (including)	1.10 (including)
Mozilocms	Mozilo	1.10.1 (including)	1.10.1 (including)

NVD	https://nvd.nist.gov/vuln/detail/CVE-2008-6128
CWE	https://cwe.mitre.org/data/definitions/287.html

Improper Authentication