CVE-2002-1058 | BDVDB-2026-4681 Detail

Description#

Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gain privileges as the Qube Admin via .. (dot dot) sequences in the sessionId cookie that point to an alternate session file.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://archives.neohapsis.com/archives/bugtraq/2002-07/0261.html
http://www.securityfocus.com/bid/5297
http://www.iss.net/security_center/static/9669.php

Exploit#

No public exploit known

History#

Version 12002-08-31Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.