CVE-2006-3837

delcookie.php in Professional Home Page Tools Guestbook changes the expiration date of a cookie instead of deleting the cookie's value, which makes it easier…

published July 25, 2006

CVSS
—
EPSS
1%
Percentile
66.9
In the wild
Unconfirmed
What it is

delcookie.php in Professional Home Page Tools Guestbook changes the expiration date of a cookie instead of deleting the cookie's value, which makes it easier for attackers to steal the cookie and obtain the administrator's password hash after logout.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01160 · 66.9th percentile
Published
2006-07-25T01:00Z
EPSS history
Timeline
  • 25 JUL 01:00Z
    delcookie.php in Professional Home Page Tools Guestbook changes the expiration date of a cookie instead of deleting the cookie's value, which makes it easier…
    cvelistv5