Unscored severity · published Oct 4, 2002
CVE-2002-1058
Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gain privileges as the Qube Admin via
–
CVSS
4.4%
EPSS
No
On KEV
Description
Directory traversal vulnerability in splashAdmin.php for Cobalt Qube 3.0 allows local users and remote attackers, to gain privileges as the Qube Admin via .. (dot dot) sequences in the sessionId cookie that point to an alternate session file.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.4% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
QU
Qube · Cobalt
3.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1058
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1058
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2002-07/0261.html
Patch
http://www.iss.net/security_center/static/9669.php
Exploit
http://www.securityfocus.com/bid/5297
More from Qube
–
CVE-2001-1408
Directory traversal vulnerability in readmsg.php in WebMail 2.0.1 in Cobalt Qube 3 allows remote attackers to read arbitrary files via a
–
CVE-1999-0831
Denial of service in Linux syslogd via a large number of connections