CVE-2008-5575

Status: ModifiedHigh (7.5)—

Severity7.5High · CVSS 2.0

Exploitation probability1.42 %higher than 73% of CVEs

Active exploitationNonot in the CISA catalog

Public exploitNot knownno public code found

Session fixation vulnerability in Pro Clan Manager 0.4.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.

CVSS

Base score: 7.5
Version: 2.0
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitation probability (EPSS)

Probability of exploitation in the next 30 days: 1.42 %
Percentile among all scored CVEs: 73
Score date: 10/21/2026

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Proclanmanager — PRO Clan Manager

CWEs

CWE-287

References

Show 8 references

Raw JSON (NVD)

Show

{
  "id": "CVE-2008-5575",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": true,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2008-12-15T18:00:00.593",
  "references": [
    {
      "url": "http://securityreason.com/securityalert/4752",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/498864/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/32606",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47036",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/4752",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/498864/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/32606",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/47036",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-287"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Session fixation vulnerability in Pro Clan Manager 0.4.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de fijación de sesión en Pro Clan Manager v0.4.2 y anteriores, permite a atacantes remotos secuestrar sesiones web estableciendo el parámetro \"PHSESSID\".\r\n"
    }
  ],
  "lastModified": "2026-06-16T23:00:36.257",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:proclanmanager:pro_clan_manager:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E3065686-D5D5-4322-B7F8-EF14A25A946F",
              "versionEndIncluding": "0.4.2"
            },
            {
              "criteria": "cpe:2.3:a:proclanmanager:pro_clan_manager:0.1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7DB01163-AF7E-45C0-9436-4674C0521D9B"
            },
            {
              "criteria": "cpe:2.3:a:proclanmanager:pro_clan_manager:0.1.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "350A6535-1EDB-40D1-98AE-BFDDC4AAD76D"
            },
            {
              "criteria": "cpe:2.3:a:proclanmanager:pro_clan_manager:0.2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2C87DF1B-9444-47F7-BF0F-7671CCEBE1E3"
            },
            {
              "criteria": "cpe:2.3:a:proclanmanager:pro_clan_manager:0.4.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A4DFD78A-65A3-47F8-9B38-75B825693B62"
            },
            {
              "criteria": "cpe:2.3:a:proclanmanager:pro_clan_manager:0.4.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BA530B2A-D7B1-405D-B55B-91AD3C1915B5"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}