← back
CVE-2006-3837

CVE-2006-3837

EPSS 1.1%
delcookie.php in Professional Home Page Tools Guestbook changes the expiration date of a cookie instead of deleting the cookie's value, which makes it easier for attackers to steal the cookie and obtain the administrator's password hash after logout.
Affected products
n/a · n/a

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txthttp://secunia.com/advisories/21102http://securityreason.com/securityalert/1275https://exchange.xforce.ibmcloud.com/vulnerabilities/27775http://www.securityfocus.com/archive/1/440421/100/0/threaded