CVE-2006-4048 | BDVDB-2026-18569 Detail

Description#

Netious CMS 0.4 initializes session IDs based on the client IP address, which allows remote attackers to gain access to the administration section when originating from the same IP address as the administrator. NOTE: the provenance of this information is unknown; the details are obtained from third party information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/21347
http://www.securityfocus.com/bid/19421
http://www.vupen.com/english/advisories/2006/3167
http://www.osvdb.org/27789
https://exchange.xforce.ibmcloud.com/vulnerabilities/28264

Exploit#

No public exploit known

History#

Version 12006-08-09Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.