CVE-2006-4582

no score yetEPSS 1.3%

Cross-site request forgery (CSRF) vulnerability in The Address Book 1.04e allows remote attackers to perform unauthorized actions as other users via unspecified vectors, as demonstrated by deleting arbitrary users via the id parameter in a deleteuser action in users.php.

EPSS: 1.3% chance of exploitation in the next 30 days; higher than 71% of CVEs (scores of 2026-10-31)
Published: 2006-12-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

the_address_book:the_address_book

References

http://osvdb.org/32559
http://secunia.com/advisories/21694
http://secunia.com/secunia_research/2006-76/advisory/
https://exchange.xforce.ibmcloud.com/vulnerabilities/31251
http://osvdb.org/32559

Check your stack JSON