Lucene search
HistoryOct 20, 2007 - 10:00 a.m.
CVE-2003-1424
cve-2003-1424
message.php
petitforum
authentication
remote attackers
impersonation
connect cookie
nvd
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.3%
message.php in Petitforum does not properly authenticate users, which allows remote attackers to impersonate forum users via a modified connect cookie.
Affected configurations
Node
petitforumpetitforum
| CPE | Name | Operator | Version |
|---|---|---|---|
| petitforum:petitforum | petitforum | eq | * |
6.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
7 High
AI Score
Confidence
Low
0.006 Low
EPSS
Percentile
78.3%
Related for CVE-2003-1424