CVE-2007-4188: Joomla!

High severity, CVSS 9.3. EPSS: 3.8% chance of exploitation in the next 30 days.

Session fixation vulnerability in Joomla! before 1.0.13 (aka Sunglow) allows remote attackers to hijack administrative web sessions via unspecified vectors.

Affected products

• Joomla! Joomla!: before 1.0.13 (fixed in 1.0.13)

Published 2007-08-08. Last modified 2026-06-16.