CVE-2006-3753: Professional Home Page Tools Guestbook

Medium severity, CVSS 6.4. EPSS: 1.2% chance of exploitation in the next 30 days.

setcookie.php for the administration login in Professional Home Page Tools Guestbook records the hash of the administrator password in a cookie, which allows attackers to conduct brute force password guessing attacks after obtaining the hash.

Affected products

• Professional Home Page Tools Professional Home Page Tools Guestbook: any version

Published 2006-07-21. Last modified 2026-06-16.