CVE-2008-6128
Session fixation vulnerability in moziloCMS 1.10.2 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
Date published : 2009-02-13
http://www.securityfocus.com/bid/31495
http://cms.mozilo.de/index.php?cat=10_moziloCMS&page=60_Changelog
