Session Hijacking Vulnerability in WorldClient Email Client

CVE-2000-0716 · LOW Severity

AV:N/AC:H/AU:N/C:P/I:N/A:N

WorldClient email client in MDaemon 2.8 includes the session ID in the referer field of an HTTP request when the user clicks on a URL, which allows the visited web site to hijack the session ID and read the user's email.

Learn more about our Web App Pen Testing.