CVE-2006-4584
UnknownEPSS 4.54%
Last modified
CVE-2006-4584 is a vulnerability of currently unknown severity. Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and password parameters to admin/insert_admin.php.. EPSS estimates a 4.54% chance of exploitation in the next 30 days.
Description
Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and password parameters to admin/insert_admin.php.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Tr Forum | Tr Forum | 2.0 |
References
- http://secunia.com/advisories/21754Vendor Advisory
- http://secunia.com/advisories/21754Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-4584?
Tr Forum 2.0 allows remote attackers to bypass authentication and add an administrative account via the login and password parameters to admin/insert_admin.php.
How severe is CVE-2006-4584?
Severity scoring for CVE-2006-4584 is pending analysis. The EPSS model estimates a 4.54% probability of exploitation in the next 30 days.
How do I fix CVE-2006-4584?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2006
- CVE-2006-4578export.php in The Address Book 1.04e writes username and pas…
- CVE-2006-4579Directory traversal vulnerability in users.php in The Addres…
- CVE-2006-4580register.php in The Address Book 1.04e allows remote attacke…
- CVE-2006-4581Unrestricted file upload vulnerability in The Address Book 1…
- CVE-2006-4582Cross-site request forgery (CSRF) vulnerability in The Addre…
- CVE-2006-4583Multiple PHP remote file inclusion vulnerabilities in FlashC…
- CVE-2006-4585SQL injection vulnerability in admin/editer.php in Tr Forum …
- CVE-2006-4586The admin panel in Tr Forum 2.0 accepts a username and passw…
- CVE-2006-4587Multiple cross-site scripting (XSS) vulnerabilities in vtige…
- CVE-2006-4588vtiger CRM 4.2.4, and possibly earlier, allows remote attack…
- CVE-2006-4589PHP remote file inclusion vulnerability in 0_admin/modules/W…
- CVE-2006-4590SQL injection vulnerability in admin/default.asp in Jetstat.…
Are you affected by CVE-2006-4584?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST