CVE-2006-4586

The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authenticated users to perform unauthorized actions, as demonstrated by modifying user settings via the id parameter to /membres/modif_profil.php, and changing a password via /membres/change_mdp.php. NOTE: this can be leveraged with other Tr Forum vulnerabilities to allow unauthenticated attackers to gain privileges.

CVSS v2.0

5.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:N

EPSS

3.20% chance of exploitation in the next 30 days, 87th percentile

Published

2006-09-06

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://acid-root.new.fr/poc/10060903.txt

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/2297

References

• CVE Record
• NVD entry

Related

• CVE-2006-4585
• CVE-2006-4589
• CVE-2006-4584
• CVE-2006-4591
• CVE-2006-4583
• CVE-2006-4592