Description
Vignette StoryServer 4 and 5, Vignette V/5, and possibly other versions allows remote attackers to perform unauthorized SELECT queries by setting the vgn_creds cookie to an arbitrary value and directly accessing the save template.
Unscored
CVE-2003-0399
EUVD-2003-0393GHSA-mw28-fqq6-34jq
Vignette StoryServer 4 and 5, Vignette V/5, and possibly other versions allows remote attackers to perform unauthorized SELECT queries by s…
Published Jun 11, 2003 · Updated Aug 8, 2024 · Assigned by mitre