CVE-2008-6298

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.48%

Published

Feb 26, 2009

Modified

Apr 22, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Unspecified vulnerability in sISAPILocation before 1.0.2.2 allows remote attackers to bypass intended access restrictions for character encoding and the cookie secure flag via unknown vectors related to the "HTTP header rewrite function."

Weaknesses (CWE)

CWE-20

Affected Products (3)

rocketeer.dip · sisapilocationvulnerable

References (14)

http://jvn.jp/en/jp/JVN67060882/index.html

http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000076.html

http://rocketeer.dip.jp/sanaki/free/free100.htm

PatchVendor Advisory

http://secunia.com/advisories/32581

Vendor Advisory

http://www.securityfocus.com/bid/32247

http://www.vupen.com/english/advisories/2008/3105

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/46516

http://jvn.jp/en/jp/JVN67060882/index.html

http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-000076.html

http://rocketeer.dip.jp/sanaki/free/free100.htm

PatchVendor Advisory

http://secunia.com/advisories/32581

Vendor Advisory

http://www.securityfocus.com/bid/32247

http://www.vupen.com/english/advisories/2008/3105

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/46516

KEV Catalog EPSS Scores Vendors All CVEs