CVE-2008-1904

Cicoandcico CcMail 1.0.1 and earlier does not verify that the this_cookie cookie corresponds to an authenticated session, which allows remote attackers to…

published April 21, 2008

CVSS
—
EPSS
2%
Percentile
82.1
In the wild
Unconfirmed
What it is

Cicoandcico CcMail 1.0.1 and earlier does not verify that the this_cookie cookie corresponds to an authenticated session, which allows remote attackers to obtain access to the "admin area" via a modified this_cookie cookie.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02185 · 82.1th percentile
Published
2008-04-21T23:00Z
EPSS history
Timeline
  • 21 APR 23:00Z
    Cicoandcico CcMail 1.0.1 and earlier does not verify that the this_cookie cookie corresponds to an authenticated session, which allows remote attackers to…
    cvelistv5