CVE-2015-0914 – EasyCTF before 1.4 does not validate the session ID, which allows remote

EasyCTF before 1.4 does not validate the session ID, which allows remote attackers to obtain access via a crafted HTTP request.

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-0914

Reference (s):

• http://jvn.jp/en/jp/JVN96439865/995657/index.html
• JVN:JVN#96439865
• URL: http://jvn.jp/en/jp/JVN96439865/index.html
• JVNDB:JVNDB-2015-000062
• URL: http://jvndb.jvn.jp/jvndb/JVNDB-2015-000062