CVE-2013-4724

CVE-2013-4724 describes a vulnerability in DDSN Interactive cm3 Acora CMS versions 6.0.6/1a, 6.0.2/1a, 5.5.7/12b, 5.5.0/1b-p1, and potentially others. The vulnerability stems from the absence of the HTTPOnly flag in a Set-Cookie header for an unspecified cookie. This oversight allows remote attackers to more easily access potentially sensitive information via script access to the affected cookie. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with a low attack complexity and potential for information disclosure. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.