CVE-2002-1058

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2002-10-04 · updated 2026-06-16

Description

Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gain privileges as the Qube Admin via .. (dot dot) sequences in the sessionId cookie that point to an alternate session file.

Affected products

Cobalt Qube: 3.0

References

http://archives.neohapsis.com/archives/bugtraq/2002-07/0261.html
http://www.iss.net/security_center/static/9669.php
http://www.securityfocus.com/bid/5297
http://archives.neohapsis.com/archives/bugtraq/2002-07/0261.html
http://www.iss.net/security_center/static/9669.php
http://www.securityfocus.com/bid/5297

Get alerted when CVE-2002-1058 or the next vulnerability affects your stack