CVE-2006-4584 Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and password parameters to admin/insert_admin.php.
HighCVSS 7.5
EPSS 4.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and password parameters to admin/insert_admin.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tr forum | = 2.0 | No fix listed |
References
- acid-root.new.fr exploit
- 21754 third-party-advisory vendor-advisory
- 1508 third-party-advisory
- 1016788 vdb-entry
- 28544 vdb-entry
- 20060903 Tr Forum V2.0 Multiple Vulnerabilities mailing-list
- 19834 exploit vdb-entry
- ADV-2006-3452 vdb-entry
- tr-forum-admin-security-bypass(28754) vdb-entry
- 2297 exploit