Skip to content

CVE-2008-3428

Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to hijack web...

6.5 Medium

CVE-2008-3428 is a medium vulnerability (CVSS 6.5) in Phpfreechat, published July 31, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.16%, the 67th percentile. No source names a fixed version.

Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to hijack web sessions by setting the session_id parameter to match the victim's nickid parameter.

Exploit likelihood

1.16%Unchanged since Feb 4, 2022

What each source reports

NVD Score used 6.5

Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to hijack web sessions by setting the session_id parameter to match the victim's nickid parameter.

Record: CVE-2008-3428
CVSS 2.0: 6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness: CWE-287
Updated: 2026-11-02

CVE List No score

Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to hijack web sessions by setting the session_id parameter to match the victim's nickid parameter.

Record: CVE-2008-3428
Updated: 2026-11-02

EUVDEUVD-2008-3414 No score

Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to hijack web sessions by setting the session_id parameter to match the victim's nickid parameter.

Record: EUVD-2008-3414
Updated: 2026-11-03

GitHub AdvisoriesGHSA-5f64-wwgv-qhfq No score

Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to hijack web...

Session fixation vulnerability in phpFreeChat 1.1 allows remote authenticated users to hijack web sessions by setting the session_id parameter to match the victim's nickid parameter.

Record: GHSA-5f64-wwgv-qhfq
Weakness: CWE-287
Updated: 2026-11-02

Affected products

phpfreechat

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, GitHub Advisories, NVD

References