CVE:CVE-2008-5575
CNNVD:CNNVD-200812-260
Pro Clan Manager是一款国际化的内容管理系统。
Pro Clan Manager 0.4.2 及其早期版本中存在固定会话漏洞。远程攻击者通过设置PHPSESSid参数来挟持web会话。
solution:Upgrade proclanmanager pro_clan_manager to a higher version than 0.4.2,0.1.0,0.1.5,0.2.0,0.4.0,0.4.1,and avoid the version (,0.4.2],0.1.0,0.1.5,0.2.0,0.4.0,0.4.1