CVE

Id
10669  
CVE No.
CVE-2004-2243  
Status
Candidate  
Description
Phorum allows remote attackers to hijack sessions of other users by stealing and replaying the session hash in the phorum_uriauth parameter, as demonstrated using profile.php. NOTE: the affected version was reported to be 4.3.7, but this may be erroneous.  
Phase
Assigned (20050717)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
74331 10669 CVE-2004-2243 FULLDISC:20040519 Ph0rum phorum_uriauth replay attack  View
74332 10669 CVE-2004-2243 URL:http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0999.html  View
74333 10669 CVE-2004-2243 SECTRACK:1010219  View
74334 10669 CVE-2004-2243 URL:http://securitytracker.com/id?1010219  View
74335 10669 CVE-2004-2243 XF:phorum-session-hijack(16215)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63646 JVNDB-2003-000372 Web Services におけるサービス運用妨害 (DoS) の脆弱性 IBM WebSphere Application Server および Microsoft .NET Framework に含まれる Web Services には、受信した SOAP メッセージの取り扱いに不備が存在し、DTD を含む SOAP メッセージを受信した場合、CPU 資源を大量に消費する脆弱性が存在します。 CVE-2004-2244 10669 5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000372.html  View