CVE-2003-1481: Stalker Communigate Pro

Medium severity, CVSS 5.8. EPSS: 1.8% chance of exploitation in the next 30 days.

CommuniGate Pro 3.1 through 4.0.6 sends the session ID in the referer field for an HTTP request for an image, which allows remote attackers to hijack mail sessions via an e-mail with an IMG tag that references a malicious URL that captures the referer.

Affected products

• Stalker Communigate Pro: version 3.1 only; version 3.2.4 only; version 3.2_b5 only; version 3.2_b7 only; version 3.3.2 only; version 3.3_b1 only; …

Published 2003-12-31. Last modified 2026-06-16.