CVE-2006-4582

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-12-31 · updated 2026-06-16

Description

Cross-site request forgery (CSRF) vulnerability in The Address Book 1.04e allows remote attackers to perform unauthorized actions as other users via unspecified vectors, as demonstrated by deleting arbitrary users via the id parameter in a deleteuser action in users.php.

Affected products

The Address Book: 1.04e

References

http://osvdb.org/32559
http://secunia.com/advisories/21694
http://secunia.com/secunia_research/2006-76/advisory/
https://exchange.xforce.ibmcloud.com/vulnerabilities/31251
http://osvdb.org/32559
http://secunia.com/advisories/21694
http://secunia.com/secunia_research/2006-76/advisory/
https://exchange.xforce.ibmcloud.com/vulnerabilities/31251

Get alerted when CVE-2006-4582 or the next vulnerability affects your stack