CVE-2008-5964: Impresscms

Medium severity, CVSS 6.8. EPSS: 1.5% chance of exploitation in the next 30 days.

Session fixation vulnerability in Social ImpressCMS before 1.1.1 RC1 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

Affected products

• Impresscms Impresscms: up to and including 1.0.3; version 1.0 only; version 1.0.1 only; version 1.0.2 only; version 1.1 only

Published 2009-01-23. Last modified 2026-06-16.