CVE-2006-5909

generaloptions.php in Paul Tarjan Stanford Conference And Research Forum (SCARF) before 20070227 does not require the admin privilege, which allows remote attackers to reconfigure the application or its user accounts.
Configurations

Configuration 1 (hide)

cpe:2.3:a:paul_tarjan:stanford_conference_and_research_forum:beta:*:*:*:*:*:*:*

History

21 Nov 2024, 00:21

Type Values Removed Values Added
References () http://secunia.com/advisories/24311 - Vendor Advisory () http://secunia.com/advisories/24311 - Vendor Advisory
References () http://sourceforge.net/project/shownotes.php?group_id=177652&release_id=489633 - () http://sourceforge.net/project/shownotes.php?group_id=177652&release_id=489633 -
References () http://www.securityfocus.com/archive/1/450679/100/0/threaded - () http://www.securityfocus.com/archive/1/450679/100/0/threaded -
References () http://www.securityfocus.com/archive/1/460196/100/0/threaded - () http://www.securityfocus.com/archive/1/460196/100/0/threaded -
References () http://www.securityfocus.com/bid/20934 - () http://www.securityfocus.com/bid/20934 -
References () http://www.vupen.com/english/advisories/2007/0760 - Vendor Advisory () http://www.vupen.com/english/advisories/2007/0760 - Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/30037 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/30037 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/32700 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/32700 -

Information

Published : 2006-11-15 15:07

Updated : 2025-04-09 00:30


NVD link : CVE-2006-5909

Mitre link : CVE-2006-5909

CVE.ORG link : CVE-2006-5909


JSON object : View

Products Affected

paul_tarjan

  • stanford_conference_and_research_forum
CWE
CWE-264

Permissions, Privileges, and Access Controls