Vulnerability Report

CVE-2003-1481

Title: CommuniGate Pro session ID disclosure via Referer

Information Disclosure

Proof Of Concept

PoC Available for CVE-2003-1481

CWE Category CWE-200

Published Date Dec 31, 2003

Modified Date Jun 16, 2026

Exploit Status Available

Score 5.8 CVSS v2.0

Exploit Probability (EPSS)

1.83%

Vulnerability Summary

CVE-2003-1481: CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer.

Impacted Vendors

stalker 1

communigate 1

Reference Links

http://securityreason.com/securityalert/3290 http://www.securityfocus.com/archive/1/320438 http://www.securityfocus.com/bid/7501 https://exchange.xforce.ibmcloud.com/vulnerabilities/11932 http://securityreason.com/securityalert/3290 http://www.securityfocus.com/archive/1/320438 http://www.securityfocus.com/bid/7501 https://exchange.xforce.ibmcloud.com/vulnerabilities/11932

CVSS v2.0

Source Entity [email protected]

Severity MEDIUM

5.8

Access Vector

N/A

Authentication

N/A

RAW VECTOR AV:N/AC:M/Au:N/C:P/I:P/A:N

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2003-1481 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/27

View Code

June 16, 2026 MODIFIED

Vulnerability data updated via NVD.

April 03, 2025 MODIFIED

Vulnerability data or affected products updated.

December 31, 2003 PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A

Complexity N/A

Privileges N/A

Interaction NONE

CVSS Vector String


                                    AV:N/AC:M/Au:N/C:P/I:P/A:N

Affected Stack

No specific products linked.