CVEvulnerability
CVE-2006-5909
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-11-15
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
generaloptions.php in Paul Tarjan Stanford Conference And Research Forum (SCARF) before 20070227 does not require the admin privilege, which allows remote attackers to reconfigure the application or its user accounts.
Affected configurations
• paul tarjan stanford conference and research forum beta
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/24311 Vendor Advisory
- http://sourceforge.net/project/shownotes.php?group_id=177652&release_id=489633 sourceforge.net
- http://www.securityfocus.com/archive/1/450679/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/460196/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20934 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0760 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30037 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32700 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/24311 Vendor Advisory
- http://sourceforge.net/project/shownotes.php?group_id=177652&release_id=489633 sourceforge.net
- http://www.securityfocus.com/archive/1/450679/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/460196/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/20934 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/0760 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30037 exchange.xforce.ibmcloud.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32700 exchange.xforce.ibmcloud.com