CVE-2018-16239

Name of the Vulnerable Software and Affected Versions damiCMS version 6.0.1

Description An issue was discovered where the software relies on the PHP time() function for cookies. This makes it possible to determine the cookie for an existing admin session via a certain number of guesses.

Recommendations For damiCMS version 6.0.1, consider implementing a more secure method for generating cookies to prevent guessing attacks. As a temporary workaround, restrict access to admin sessions to minimize the risk of exploitation.