CVE-2000-0716
WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijac…
Published: 2001-01-22 · CVSS: Unscored
WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7