• info
• discussion
• exploit
• solution
• references

IMHO Webmail Account Hijacking Vulnerability

The following example was provided:

- Login with an valid user/passwd,
- Logout
- Goto URL : (((webmail_URL)))/(old_error,plain)/mail/error?error=1

This will cause the webserver to display a REFERER. This REFERER may be submitted to access another user's session.