CVE:CVE-2008-4649
CNNVD:CNNVD-200810-350
Elxis CMS存在会话固定漏洞，远程攻击者通过设置PHPSESSID参数，来劫持web会话。
solution:Upgrade elxis elxis_cms to a higher version than 2008.1:revision_2204,and avoid the version 2008.1:revision_2204