Deskripsi CVE

The admin panel in Tr Forum 2.0 accepts a username and password hash for authentication, which allows remote authenticated users to perform unauthorized actions, as demonstrated by modifying user settings via the id parameter to /membres/modif_profil.php, and changing a password via /membres/change_mdp.php. NOTE: this can be leveraged with other Tr Forum vulnerabilities to allow unauthenticated attackers to gain privileges.

Informasi CVE

Metrik

Metrik	Skor	Tingkat keparahan	CVSS Vektor	Sumber
V2	5.5		AV:N/AC:L/Au:S/C:P/I:P/A:N	nvd@nist.gov

EPSS

EPSS adalah model penilaian yang memprediksi kemungkinan suatu kerentanan dieksploitasi.

Skor EPSS

Model EPSS menghasilkan skor probabilitas antara 0 dan 1 (0 hingga 100%). Semakin tinggi skor, semakin besar probabilitas bahwa suatu kerentanan akan dieksploitasi.

Persentil EPSS

Persentil digunakan untuk meranking CVE berdasarkan skor EPSS mereka. Misalnya, CVE di persentil ke-95 berdasarkan skor EPSS-nya lebih mungkin dieksploitasi daripada 95% CVE lainnya. Dengan demikian, persentil digunakan untuk membandingkan skor EPSS suatu CVE dengan CVE lainnya.

EPSS First.org

Informasi eksploitasi

Exploit Database EDB-ID : 2297

Tanggal publikasi : 2006-09-03 22h00 +00:00
Penulis : DarkFig
Terverifikasi EDB : Yes

Produk yang Disebutkan

Konfigurasi 0

Tr_forum>>Tr_forum >> Version 2.0

Referensi

http://www.osvdb.org/28542
Tags : vdb-entry, x_refsource_OSVDB

http://securityreason.com/securityalert/1508
Tags : third-party-advisory, x_refsource_SREASON

http://www.securityfocus.com/archive/1/445079/100/0/threaded
Tags : mailing-list, x_refsource_BUGTRAQ

https://exchange.xforce.ibmcloud.com/vulnerabilities/28756
Tags : vdb-entry, x_refsource_XF

http://www.vupen.com/english/advisories/2006/3452
Tags : vdb-entry, x_refsource_VUPEN

http://secunia.com/advisories/21754
Tags : third-party-advisory, x_refsource_SECUNIA

http://www.securityfocus.com/bid/19834
Tags : vdb-entry, x_refsource_BID

https://www.exploit-db.com/exploits/2297
Tags : exploit, x_refsource_EXPLOIT-DB

http://acid-root.new.fr/poc/10060903.txt
Tags : x_refsource_MISC

http://securitytracker.com/id?1016788
Tags : vdb-entry, x_refsource_SECTRACK

Tanggal	EPSS V0	EPSS V1	EPSS V2 (> 2022-02-04)	EPSS V3 (> 2025-03-07)	EPSS V4 (> 2025-03-17)
2022-02-06	–	–	1.82%	–	–
2022-02-13	–	–	1.82%	–	–
2022-04-03	–	–	1.82%	–	–
2022-06-26	–	–	1.82%	–	–
2022-11-13	–	–	1.82%	–	–
2022-11-20	–	–	1.82%	–	–
2022-12-11	–	–	1.82%	–	–
2023-01-01	–	–	1.82%	–	–
2023-01-29	–	–	1.82%	–	–
2023-03-12	–	–	–	0.37%	–
2023-04-30	–	–	–	0.39%	–
2023-06-04	–	–	–	0.44%	–
2023-07-16	–	–	–	0.45%	–
2023-08-20	–	–	–	0.47%	–
2023-08-27	–	–	–	0.47%	–
2023-11-05	–	–	–	0.42%	–
2024-02-11	–	–	–	0.42%	–
2024-03-03	–	–	–	0.42%	–
2024-05-12	–	–	–	0.41%	–
2024-06-02	–	–	–	0.41%	–
2024-09-15	–	–	–	0.41%	–
2024-11-03	–	–	–	0.41%	–
2024-12-22	–	–	–	0.43%	–
2024-12-29	–	–	–	0.61%	–
2025-01-12	–	–	–	0.61%	–
2025-01-19	–	–	–	0.61%	–
2025-03-18	–	–	–	–	9.29%
2025-04-25	–	–	–	–	9.63%
2025-06-01	–	–	–	–	9.63%
2025-06-04	–	–	–	–	9.63%
2025-06-21	–	–	–	–	9.63%
2025-06-23	–	–	–	–	9.63%
2025-07-01	–	–	–	–	9.63%
2025-07-06	–	–	–	–	9.63%
2025-07-07	–	–	–	–	9.63%
2025-07-08	–	–	–	–	9.63%
2025-07-09	–	–	–	–	9.63%
2025-08-25	–	–	–	–	10.54%
2026-01-17	–	–	–	–	9.38%

Tanggal	Persentil
2022-02-06	54%
2022-02-13	55%
2022-04-03	75%
2022-06-26	76%
2022-11-13	77%
2022-11-20	76%
2022-12-11	77%
2023-01-01	76%
2023-01-29	77%
2023-03-12	68%
2023-04-30	69%
2023-06-04	71%
2023-07-16	72%
2023-08-20	72%
2023-08-27	73%
2023-11-05	71%
2024-02-11	73%
2024-03-03	74%
2024-05-12	74%
2024-06-02	74%
2024-09-15	74%
2024-11-03	75%
2024-12-22	74%
2024-12-29	78%
2025-01-12	79%
2025-01-19	79%
2025-03-18	92%
2025-04-25	92%
2025-06-01	93%
2025-06-04	92%
2025-06-21	93%
2025-06-23	92%
2025-07-01	93%
2025-07-06	92%
2025-07-07	93%
2025-07-08	92%
2025-07-09	93%
2025-08-25	93%
2026-01-17	93%

CVE-2006-4586 : Detail

CVE-2006-4586