Vulnerability Database

308,820

Total vulnerabilities in the database

CVE-2001-1545

Macromedia JRun 3.0 and 3.1 appends the jsessionid to URL requests (a.k.a. rewriting) when client browsers have cookies enabled, which allows remote attackers to obtain session IDs and hijack sessions via HTTP referrer fields or sniffing.

  • Published: Dec 31, 2001
  • Updated: Nov 9, 2025
  • CVE: CVE-2001-1545
  • Severity: Medium
  • Exploit:

CVSS v2:

  • Severity: Medium
  • Score: 5
  • AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Software From Fixed in
macromedia / jrun 3.1 3.1.x
macromedia / jrun 3.0 3.0.x