Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Mobile Edition of TransWARE Active! mail 2003 build 2003.0139.0871 and earlier, and possibly other versions before 2003.0139.0911, does not remove the session ID in a Referer URL, which allows remote attackers to hijack web sessions via vectors such as an email with an embedded URL.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
TransWARE Active! mail Referer URL漏洞WEB会话劫持漏洞
Vulnerability Description
TransWARE Active! mail 2003 build中的Mobile Edition不会把会谈ID移入一个Referer URL,远程攻击者可以借助如内含URL的邮件的向量攻击劫持web会话。
CVSS Information
N/A
Vulnerability Type
N/A