CVE-2003-1424

message.php in Petitforum does not properly authenticate users, which allows remote attackers to impersonate forum users via a modified connect cookie.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2003-12-31

Last modified

2024-08-08

Weaknesses

CWE-255

Affected products

• Petitforum (Petitforum)

References

• http://securitytracker.com/id?1006117
• https://exchange.xforce.ibmcloud.com/vulnerabilities/11359