CVE-2007-3050
Session fixation vulnerability in chameleon cms 3.0 and earlier allows remote attackers to hijack web sessions by setting the PHPSESSID parameter.
Date published : 2007-06-05
http://www.securityfocus.com/archive/1/470273/100/0/threaded
http://www.securityfocus.com/archive/1/470759/100/0/threaded