CVE-2006-3837

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-07-25 · updated 2026-06-16

Description

delcookie.php in Professional Home Page Tools Guestbook changes the expiration date of a cookie instead of deleting the cookie's value, which makes it easier for attackers to steal the cookie and obtain the administrator's password hash after logout.

Affected products

Professional Home Page Tools Guestbook: all versions

References

http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt
http://secunia.com/advisories/21102
http://securityreason.com/securityalert/1275
http://www.securityfocus.com/archive/1/440421/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/27775
http://artemis.abenteuer-mittelerde.de/pub/adv02-phptgb.txt
http://secunia.com/advisories/21102
http://securityreason.com/securityalert/1275
http://www.securityfocus.com/archive/1/440421/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/27775

Get alerted when CVE-2006-3837 or the next vulnerability affects your stack