2008.1

DATE	CVE	VULNERABILITY TITLE	RISK
2008-10-22	CVE-2008-4649	Improper Authentication vulnerability in Elxis CMS 2008.1 Session fixation vulnerability in Elxis CMS 2008.1 revision 2204 allows remote attackers to hijack web sessions by setting the PHPSESSID parameter. network low complexity elxis CWE-287	7.5
2008-10-22	CVE-2008-4648	Cross-Site Scripting vulnerability in Elxis CMS 2008.1 Cross-site scripting (XSS) vulnerability in index.php in Elxis CMS 2008.1 revision 2204 allows remote attackers to inject arbitrary web script or HTML via the (1) PATH_INFO or the (2) option, (3) Itemid, (4) id, (5) task, (6) bid, and (7) contact_id parameters. network elxis CWE-79	4.3