CVE-2007-1966

CRITICAL · CVSS 9.1 EPSS 1.24%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-04-11 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.1. It may be remotely exploitable.

CVE

CVE-2007-1966

Severity

CRITICAL

CVSS

9.1

EPSS

1.24%

Session fixation vulnerability in eXV2 CMS 2.0.4.3 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID cookie.