← Database

CVE-2006-3837

MEDIUM CVSS: 5.0 Published: 2006-07-25 Modified: 2026-06-16

Description

delcookie.php in Professional Home Page Tools Guestbook changes the expiration date of a cookie instead of deleting the cookie's value, which makes it easier for attackers to steal the cookie and obtain the administrator's password hash after logout.

Affected Platforms

Professional Home Page Tools Professional Home Page Tools Guestbook

Weakness Type

NVD-CWE-Other

References