← Database

CVE-2001-0857

HIGH CVSS: 7.5 Published: 2001-12-06 Modified: 2026-06-16

Description

Cross-site scripting vulnerability in status.php3 in Imp Webmail 2.2.6 and earlier allows remote attackers to gain access to the e-mail of other users by hijacking session cookies via the message parameter.

Affected Platforms

Imp Webmail

Weakness Type

NVD-CWE-Other

References