CVE:CVE-2007-3050
CNNVD:CNNVD-200706-040
chameleon cms 3.0及之前版本中存在会话固定漏洞。远程攻击者可以借助PHPSESSID参数，劫持web会话。
solution:Upgrade chameleon_cms chameleon_cms to a higher version than 3.0,and avoid the version (,3.0]