Description
The session management of the comment functionality in appleple a-blog cms 2.6.0.1 and earlier allows remote attackers to obtain or modify sensitive data via unspecified vectors.
References
- JVN#03975805 third-party-advisory
- JVNDB-2016-000047 third-party-advisory
- https://developer.a-blogcms.jp/blog/patch/entry-2363.html