返回 CVE 浏览器

CVE-2008-3738

CRITICAL

9.1

CVSS Severity Score

EPSS Score0.0650%

EPSS Percentile31.79th

Published2008年8月27日

Last Modified2026年4月23日

Vulnerability Description

Session fixation vulnerability in SpaceTag LacoodaST 2.1.3 and earlier allows remote attackers to hijack web sessions via unspecified vectors.

Affected Platforms (CPE)

📦

Spacetag

Lacoodast

<= 2.1.3

References & Advisories

🔗 http://jvn.jp/en/jp/JVN31723154/index.html

🔗 http://secunia.com/advisories/31582

🔗 http://www.securityfocus.com/bid/30791

🔗 http://www.spacetag.jp/modules/products/index.php?id=54

🔗 http://jvn.jp/en/jp/JVN31723154/index.html

🔗 http://secunia.com/advisories/31582

🔗 http://www.securityfocus.com/bid/30791

🔗 http://www.spacetag.jp/modules/products/index.php?id=54

相关漏洞威胁

CVE-2008-373710.0

Unspecified vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3 and earlier al...

CVE-2008-37366.0

Multiple cross-site request forgery (CSRF) vulnerabilities in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceT...

CVE-2008-37394.3

Cross-site scripting (XSS) vulnerability in (1) System Consultants La!Cooda WIZ 1.4.0 and earlier and (2) SpaceTag LacoodaST 2.1.3...

CVE-2008-535310.0

The Java Runtime Environment (JRE) for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and...