CVE-2005-0157 in SmartList

Summary

The confirm add-on in SmartList 3.15 and earlier allows attackers to subscribe arbitrary e-mail addresses by using a valid cookie that specifies an address other than the address for which the cookie was assigned.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservation: 01/27/2005
• Disclosure: 05/03/2005
• Moderation: VulDB entry created
• Entries: VDB-24999 (1)
• CPE: ready
• CWE: Unknown
• CVSS: 7.3
• EPSS: 0.00489
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2005-0157
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2005-0157
• CVE Details: https://www.cvedetails.com/cve/CVE-2005-0157/