CVE-2003-1481

Severity: medium (CVSS 5.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-12-31 · updated 2026-06-16
Weakness: CWE-200

Description

CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer.

Affected products

Stalker Communigate Pro: 3.1, 3.2.4, 3.2_b5, 3.2_b7, 3.3.2, 3.3_b1 (+8)

References

http://securityreason.com/securityalert/3290
http://www.securityfocus.com/archive/1/320438
http://www.securityfocus.com/bid/7501
https://exchange.xforce.ibmcloud.com/vulnerabilities/11932
http://securityreason.com/securityalert/3290
http://www.securityfocus.com/archive/1/320438
http://www.securityfocus.com/bid/7501
https://exchange.xforce.ibmcloud.com/vulnerabilities/11932

Get alerted when CVE-2003-1481 or the next vulnerability affects your stack