critical10.0Public exploit code
CVE-2002-1058
Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gain privileges as the Qube Admin via ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cobalt Qube 3.0 - Authentication Bypass2002-07-24 · webapps · php · Verified
Impact
Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gain privileges as the Qube Admin via .. (dot dot) sequences in the sessionId cookie that point to an alternate session file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cobalt | Qube | Version 3.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0261.html
- http://www.iss.net/security_center/static/9669.php
- http://www.securityfocus.com/bid/5297
- http://archives.neohapsis.com/archives/bugtraq/2002-07/0261.html
- http://www.iss.net/security_center/static/9669.php
- http://www.securityfocus.com/bid/5297