CVE-2006-3753 | BDVDB-2026-18239 Detail

Description#

setcookie.php for the administration login in Professional Home Page Tools Guestbook records the hash of the administrator password in a cookie, which allows attackers to conduct brute force password guessing attacks after obtaining the hash.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt
http://www.securityfocus.com/archive/1/440421/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/27775
http://secunia.com/advisories/21102
http://securitytracker.com/id?1016550

Exploit#

No public exploit known

History#

Version 12006-07-20Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.