Skip to main content
PricingEnterprise
Home/Vulnerabilities/CVE-2007-6546

CVE-2007-6546

NONE

RunCMS before 1.6.1 uses a predictable session id, which makes it easier for remote attackers to hijack sessions via a modified id.

Published: 12/28/2007Updated: 4/9/2025
View on NVDView on MITRE

Description

RunCMS before 1.6.1 uses a predictable session id, which makes it easier for remote attackers to hijack sessions via a modified id.

AI AnalysisPowered by AI

Affected Products

runcmsruncms

Available Exploits (1)

EDB-4790
webappsphpVERIFIED

RunCMS 1.6 - Multiple Vulnerabilities

CVE-2007-6548CVE-2007-6547CVE-2007-6546+1 more
DSecRG12/25/2007

References

  • http://osvdb.org/41245
  • http://securityreason.com/securityalert/3493
  • http://www.runcms.org/modules/mydownloads/singlefile.php?lid=131
  • http://www.securityfocus.com/archive/1/485512/100/0/threaded
  • http://www.securityfocus.com/bid/27019
  • https://www.exploit-db.com/exploits/4790
  • http://osvdb.org/41245
  • http://securityreason.com/securityalert/3493
  • http://www.runcms.org/modules/mydownloads/singlefile.php?lid=131
  • http://www.securityfocus.com/archive/1/485512/100/0/threaded
  • http://www.securityfocus.com/bid/27019
  • https://www.exploit-db.com/exploits/4790

Quick Actions

Search on Exploit-DBSearch PoC on GoogleSearch on GitHub