CVE
- Id
- 4090
- CVE No.
- CVE-2001-1286
- Status
- Candidate
- Description
- Ipswitch IMail 7.04 and earlier stores a user"s session ID in a URL, which could allow remote attackers to hijack sessions by obtaining the URL, e.g. via an HTML email that causes the Referrer to be sent to a URL under the attacker"s control.
- Phase
- Proposed (20020502)
- Votes
- ACCEPT(1) Green | MODIFY(1) Frech | NOOP(4) Cole, Cox, Foat, Wall
- Comments
- Frech> XF:imail-mailbox-directory-traversal(7275)