CVE

Id
32021  
CVE No.
CVE-2008-1904  
Status
Candidate  
Description
Cicoandcico CcMail 1.0.1 and earlier does not verify that the this_cookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified this_cookie cookie.  
Phase
Assigned (20080421)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
345398 32021 CVE-2008-1904 MILW0RM:5433  View
345399 32021 CVE-2008-1904 URL:http://www.milw0rm.com/exploits/5433  View
345400 32021 CVE-2008-1904 BID:28751  View
345401 32021 CVE-2008-1904 URL:http://www.securityfocus.com/bid/28751  View
345402 32021 CVE-2008-1904 SECUNIA:29812  View
345403 32021 CVE-2008-1904 URL:http://secunia.com/advisories/29812  View
345404 32021 CVE-2008-1904 XF:ccmail-admin-security-bypass(41797)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
47667 JVNDB-2008-002977 cpCommerce におけるディレクトリトラバーサルの脆弱性 cpCommerce には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-1908 32021 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002977.html  View