CVE-2006-3837

CVE-2006-3837 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:P/A:N

delcookie.php in Professional Home Page Tools Guestbook changes the expiration date of a cookie instead of deleting the cookie's value, which makes it easier for attackers to steal the cookie and obtain the administrator's password hash after logout.

Learn more about our Web Application Penetration Testing UK.