CVE-2003-1481

Published: Dec 31, 2003Modified: Apr 16, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer.

Affected (14)

Products: Stalker: Communigate Pro

Stalker

1 product

Communigate Pro

Configuration A

14 vulnerable

Vulnerable Software	Affected Versions
Stalker Communigate Pro	Version 3.1
Stalker Communigate Pro	Version 3.2.4
Stalker Communigate Pro	Version 3.2_b5
Stalker Communigate Pro	Version 3.2_b7
Stalker Communigate Pro	Version 3.3.2
Stalker Communigate Pro	Version 3.3_b1
Stalker Communigate Pro	Version 3.3_b2
Stalker Communigate Pro	Version 3.4_b3
Stalker Communigate Pro	Version 4.0.1
Stalker Communigate Pro	Version 4.0.2
Stalker Communigate Pro	Version 4.0.3
Stalker Communigate Pro	Version 4.0.6
Stalker Communigate Pro	Version 4.0_b2
Stalker Communigate Pro	Version 4.0_b3