generaloptions.php in Paul Tarjan Stanford Conference And Research Forum (SCARF) before 20070227 does not require the admin privilege, which allows remote attackers to reconfigure the application or its user accounts.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:21
Type | Values Removed | Values Added |
---|---|---|
References | () http://secunia.com/advisories/24311 - Vendor Advisory | |
References | () http://sourceforge.net/project/shownotes.php?group_id=177652&release_id=489633 - | |
References | () http://www.securityfocus.com/archive/1/450679/100/0/threaded - | |
References | () http://www.securityfocus.com/archive/1/460196/100/0/threaded - | |
References | () http://www.securityfocus.com/bid/20934 - | |
References | () http://www.vupen.com/english/advisories/2007/0760 - Vendor Advisory | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/30037 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/32700 - |
Information
Published : 2006-11-15 15:07
Updated : 2025-04-09 00:30
NVD link : CVE-2006-5909
Mitre link : CVE-2006-5909
CVE.ORG link : CVE-2006-5909
JSON object : View
Products Affected
paul_tarjan
- stanford_conference_and_research_forum
CWE
CWE-264
Permissions, Privileges, and Access Controls