CVE-2007-4188 - Session fixation vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to hijack administrative web sessions via unspecified vectors

Back Back to CVE browser

HIGH

Session fixation vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to hijack administrative web sessions via unspecified vectors

Published Aug 8, 2007

9.3

HIGH

CVSS 2.0

EPSS 3.76%

Description

Session fixation vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to hijack administrative web sessions via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-384

References (5)

http://secunia.com/advisories/26239
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.joomla.org/content/view/3677/1/
x_refsource_CONFIRMVendor Advisory
http://www.securityfocus.com/archive/1/476017/100/0/threaded
mailing-listx_refsource_BUGTRAQThird Party AdvisoryVDB Entry
http://www.vupen.com/english/advisories/2007/2719
vdb-entryx_refsource_VUPENThird Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/35953
vdb-entryx_refsource_XFBroken LinkThird Party AdvisoryVDB Entry

Link	Providers	Tags
http://secunia.com/advisories/26239		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.joomla.org/content/view/3677/1/		x_refsource_CONFIRMVendor Advisory
http://www.securityfocus.com/archive/1/476017/100/0/threaded		mailing-listx_refsource_BUGTRAQThird Party AdvisoryVDB Entry
http://www.vupen.com/english/advisories/2007/2719		vdb-entryx_refsource_VUPENThird Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/35953		vdb-entryx_refsource_XFBroken LinkThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 8, 2007

Updated Aug 7, 2024

Reserved Aug 7, 2007

Link CVE-2007-4188

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2007-4188

Red Hat

Severity n/a

Public date n/a

Links CVE-2007-4188