VYPR
← All advisories
Unrated severityNVD Advisory· Published Dec 31, 2003· Updated Jun 16, 2026

CVE-2003-1481

CVE-2003-1481

Description

CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

15
  • Stalker/Communigate Pro14 versions
    cpe:2.3:a:stalker:communigate_pro:3.1:*:*:*:*:*:*:*+ 13 more
    • cpe:2.3:a:stalker:communigate_pro:3.1:*:*:*:*:*:*:*
    • cpe:2.3:a:stalker:communigate_pro:3.2.4:*:*:*:*:*:*:*
    • cpe:2.3:a:stalker:communigate_pro:3.2_b5:*:*:*:*:*:*:*
    • cpe:2.3:a:stalker:communigate_pro:3.2_b7:*:*:*:*:*:*:*
    • cpe:2.3:a:stalker:communigate_pro:3.3.2:*:*:*:*:*:*:*
    • cpe:2.3:a:stalker:communigate_pro:3.3_b1:*:*:*:*:*:*:*
    • cpe:2.3:a:stalker:communigate_pro:3.3_b2:*:*:*:*:*:*:*
    • cpe:2.3:a:stalker:communigate_pro:3.4_b3:*:*:*:*:*:*:*
    • cpe:2.3:a:stalker:communigate_pro:4.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:stalker:communigate_pro:4.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:stalker:communigate_pro:4.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:stalker:communigate_pro:4.0.6:*:*:*:*:*:*:*
    • cpe:2.3:a:stalker:communigate_pro:4.0_b2:*:*:*:*:*:*:*
    • cpe:2.3:a:stalker:communigate_pro:4.0_b3:*:*:*:*:*:*:*
  • Ultimate Project Manager CRM/PROllm-fuzzy
    Range: 3.1 - 4.0.6

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.