CVE-2006-4048

CVE-2006-4048 describes a vulnerability in Netious CMS 0.4 where session IDs are generated using the client's IP address. This design flaw allows remote attackers to potentially gain unauthorized access to the administrative section if they share the same IP address as a legitimate administrator. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its low attack complexity and potential for partial compromise of confidentiality, integrity, and availability. Despite its age and severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.