CVE-2006-3837: Professional Home Page Tools Guestbook

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

delcookie.php in Professional Home Page Tools Guestbook changes the expiration date of a cookie instead of deleting the cookie's value, which makes it easier for attackers to steal the cookie and obtain the administrator's password hash after logout.

Affected products

• Professional Home Page Tools Professional Home Page Tools Guestbook: any version

Published 2006-07-25. Last modified 2026-06-16.