Chameleon Cms

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Chameleon Cms records in CISA KEV

No Chameleon Cms vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Chameleon Cms · all components

TI-2007-02949 CVE-2007-3050 · GHSA-f38h-8whh-fx2q

LOW 36

Session fixation vulnerability in chameleon cms 3.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01682 Published 2007-06-06 No fix listed CWE-287