Skip to content
OpenAdvisories
Unscored CVE-2006-3837 EUVD-2006-3831GHSA-9hxm-6j84-wxfj

delcookie.php in Professional Home Page Tools Guestbook changes the expiration date of a cookie instead of deleting the cookie's value, whi…

Published Jul 25, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

delcookie.php in Professional Home Page Tools Guestbook changes the expiration date of a cookie instead of deleting the cookie's value, which makes it easier for attackers to steal the cookie and obtain the administrator's password hash after logout.

References