CVE-2006-4586

no score yetEPSS 3.3%

tr forum tr forum: no CVSS score yet. EPSS 3.3% chance of exploitation in the next 30 days.

The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authenticated users to perform unauthorized actions, as demonstrated by modifying user settings via the id parameter to /membres/modif_profil.php, and changing a password via /membres/change_mdp.php. NOTE: this can be leveraged with other Tr Forum vulnerabilities to allow unauthenticated attackers to gain privileges.

EPSS: 3.3% chance of exploitation in the next 30 days; higher than 88% of CVEs (scores of 2026-10-31)
Published: 2006-09-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

tr_forum:tr_forum

References

http://acid-root.new.fr/poc/10060903.txt
http://secunia.com/advisories/21754
http://securityreason.com/securityalert/1508
http://securitytracker.com/id?1016788
http://www.osvdb.org/28542

Check your stack JSON