CVE-2007-2546

MEDIUM · CVSS 6.8 EPSS 1.49%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2007-05-09 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 6.8. It may be remotely exploitable.

CVE

CVE-2007-2546

Severity

MEDIUM

CVSS

6.8

EPSS

1.49%

Original NVD Description

Session fixation vulnerability in Simple Machines Forum (SMF) 1.1.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.