VULNERABILITY INTELLIGENCE
CVE-2006-3837
CVSS score5 MEDIUM
EPSS probability1.16%
CISA KEVNot currently listed
Published2006-07-25
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
delcookie.php in Professional Home Page Tools Guestbook changes the expiration date of a cookie instead of deleting the cookie's value, which makes it easier for attackers to steal the cookie and obtain the administrator's password hash after logout.