What’s Vulnerable › Vulnerabilities

CVE-2006-5909

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2006-11-15 · updated 2026-06-16
• Weakness: CWE-264

Description

generaloptions.php in Paul Tarjan Stanford Conference And Research Forum (SCARF) before 20070227 does not require the admin privilege, which allows remote attackers to reconfigure the application or its user accounts.

Affected products

• Paul Tarjan Stanford Conference And Research Forum: beta

References

• http://secunia.com/advisories/24311
• http://sourceforge.net/project/shownotes.php?group_id=177652&release_id=489633
• http://www.securityfocus.com/archive/1/450679/100/0/threaded
• http://www.securityfocus.com/archive/1/460196/100/0/threaded
• http://www.securityfocus.com/bid/20934
• http://www.vupen.com/english/advisories/2007/0760
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30037
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32700
• http://secunia.com/advisories/24311
• http://sourceforge.net/project/shownotes.php?group_id=177652&release_id=489633
• http://www.securityfocus.com/archive/1/450679/100/0/threaded
• http://www.securityfocus.com/archive/1/460196/100/0/threaded

Get alerted when CVE-2006-5909 or the next vulnerability affects your stack