Vulnerability Details CVE-2006-3837
delcookie.php in Professional Home Page Tools Guestbook changes the expiration date of a cookie instead of deleting the cookie's value, which makes it easier for attackers to steal the cookie and obtain the administrator's password hash after logout.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.5%
CVSS Severity
CVSS v2 Score 5.0
References
- http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt
- http://secunia.com/advisories/21102
- http://securityreason.com/securityalert/1275
- http://www.securityfocus.com/archive/1/440421/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27775
- http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt
- http://secunia.com/advisories/21102
- http://securityreason.com/securityalert/1275
- http://www.securityfocus.com/archive/1/440421/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27775
Products affected by CVE-2006-3837
-
cpe:2.3:a:professional_home_page_tools:professional_home_page_tools_guestbook:*