Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing and replaying the encrypted password after obtaining a valid session ID.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/7924 | Vendor Advisory |
http://marc.info/?l=bugtraq&m=105578322012128&w=2 |
Configurations
Information
Published : 2003-08-06 21:00
Updated : 2016-10-17 19:34
NVD link : CVE-2003-0493
Mitre link : CVE-2003-0493
JSON object : View
CWE
Products Affected
snitz_communications
- snitz_forums_2000