CVE-2006-5909

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.53%

Published

Nov 15, 2006

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

generaloptions.php in Paul Tarjan Stanford Conference And Research Forum (SCARF) before 20070227 does not require the admin privilege, which allows remote attackers to reconfigure the application or its user accounts.

Weaknesses (CWE)

CWE-264

Affected Products (1)

paul_tarjan · stanford_conference_and_research_forumvulnerable

References (16)

http://secunia.com/advisories/24311

Vendor Advisory

http://sourceforge.net/project/shownotes.php?group_id=177652&release_id=489633

http://www.securityfocus.com/archive/1/450679/100/0/threaded

http://www.securityfocus.com/archive/1/460196/100/0/threaded

http://www.securityfocus.com/bid/20934

http://www.vupen.com/english/advisories/2007/0760

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/30037

https://exchange.xforce.ibmcloud.com/vulnerabilities/32700

http://secunia.com/advisories/24311

Vendor Advisory

http://sourceforge.net/project/shownotes.php?group_id=177652&release_id=489633

http://www.securityfocus.com/archive/1/450679/100/0/threaded

http://www.securityfocus.com/archive/1/460196/100/0/threaded

http://www.securityfocus.com/bid/20934

http://www.vupen.com/english/advisories/2007/0760

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/30037

https://exchange.xforce.ibmcloud.com/vulnerabilities/32700

KEV Catalog EPSS Scores Vendors All CVEs