CVE-2007-5905
NoneCVSS
—
EPSS
13.1%
Published
Nov 15, 2007
CISA due date
—
The record
Adobe ColdFusion 8 and MX 7 allows remote attackers to hijack sessions via unspecified vectors that trigger establishment of a session to a ColdFusion application in which the (1) CFID or (2) CFTOKEN cookies have empty values, possibly due to a session fixation vulnerability.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-19750 A flaw has been found in Tenda CH, CP and TX3 V21.x/V22.x/V25.x/V26.x/V27.x. CWE-255
- CVE-2026-11552 A vulnerability has been found in SourceCodester Onlne Examination & Learning Management… CWE-255
- CVE-2026-11515 A vulnerability has been found in SourceCodester Barangay Resident Profiling and… CWE-255
- CVE-2026-6597 A weakness has been identified in langflow-ai langflow up to 1.8.3. CWE-255
- CVE-2026-4251 A vulnerability was determined in CityData CityChat up to 0.12.6 on Android. CWE-255
- CVE-2026-4250 A vulnerability was found in Albert Sağlık Hizmetleri ve Ticaret Albert Health up to… CWE-255
- CVE-2026-4242 A security flaw has been discovered in BabyChakra Pregnancy & Parenting App up to 5.4.3.0… CWE-255
- CVE-2026-4243 A weakness has been identified in La Nacion App 10.2.25 on Android. CWE-255