Description
WebX stores authentication information in the HTTP_REFERER variable, which is included in URL links within bulletin board messages posted by users, which could allow remote attackers to hijack user sessions.
References
- webcrossing-webx-session-hijack(7458) vdb-entry
- 20011030 Web Forum Account Hijacking Vuln. mailing-list