Description
Snitz Forums 3.4.03 and earlier allows attackers to gain privileges as other users by stealing and replaying the encrypted password after obtaining a valid session ID.
References
- 20030616 Multiple Vulnerabilities In Snitz Forums mailing-list
- 7924 vdb-entry