CVE-2006-3753

setcookie.php for the administration login in Professional Home Page Tools Guestbook records the hash of the administrator password in a cookie, which allows attackers to conduct brute force password guessing attacks after obtaining the hash.
Configurations

Configuration 1 (hide)

cpe:2.3:a:professional_home_page_tools:professional_home_page_tools_guestbook:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2006-07-21 14:03

Updated : 2024-02-04 16:52


NVD link : CVE-2006-3753

Mitre link : CVE-2006-3753

CVE.ORG link : CVE-2006-3753


JSON object : View

Products Affected

professional_home_page_tools

  • professional_home_page_tools_guestbook