CVE-2006-5909

MEDIUM 5.0CVE-2006-5909 · Published 15/11/2006 · updated 16/06/2026

In short

CVE-2006-5909 is a MEDIUM (CVSS 5.0) vulnerability affecting stanford conference and research forum (paul tarjan).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 75.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
stanford conference and research forum paul_tarjan	`= beta`	No fix yet

Description

generaloptions.php in Paul Tarjan Stanford Conference And Research Forum (SCARF) before 20070227 does not require the admin privilege, which allows remote attackers to reconfigure the application or its user accounts.

References

secunia.com/advisories/24311 · Vendor Advisory
sourceforge.net/project/shownotes.php
securityfocus.com/archive/1/450679/100/0/threaded
securityfocus.com/archive/1/460196/100/0/threaded
securityfocus.com/bid/20934
vupen.com/english/advisories/2007/0760 · Vendor Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/30037
exchange.xforce.ibmcloud.com/vulnerabilities/32700

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free