NVD

Id
63219  
Name
CVE-2006-4586  
Description
The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authenticated users to perform unauthorized actions, as demonstrated by modifying user settings via the id parameter to /membres/modif_profil.php, and changing a password via /membres/change_mdp.php. NOTE: this can be leveraged with other Tr Forum vulnerabilities to allow unauthenticated attackers to gain privileges.  
Reject
 
CVSS Version
2  
CVSS Score
5.5  
Severity
Medium  
CVSS Base Score
5.5  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-09-06  
Modified Date
2011-03-07  
Seq
2006-4586  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
329397 63219 CVE-2006-4586 http://acid-root.new.fr/poc/10060903.txt  View
329398 63219 CVE-2006-4586 2297  View
329399 63219 CVE-2006-4586 1508  View
329400 63219 CVE-2006-4586 1016788  View
329401 63219 CVE-2006-4586 20060903 Tr Forum V2.0 Multiple Vulnerabilities  View
329402 63219 CVE-2006-4586 19834  View
329403 63219 CVE-2006-4586 ADV-2006-3452  View
329404 63219 CVE-2006-4586 tr-forum-membres-security-bypass(28756)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60848 JVNDB-2006-003114 Tr Forum の admin パネルにおける許可されていない操作を実行される脆弱性 Tr Forum の admin パネルは、認証でユーザ名およびパスワードハッシュを受け入れるため、許可されていない操作を実行される脆弱性が存在します。 CVE-2006-4586 20688 CVE-2006-4586 63219 5.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003114.html 2006-09-06 2012-12-20 View