Unscored severity · published Jul 18, 2006
CVE-2006-3671
Cross-site request forgery (CSRF) vulnerability in the communicate function in estmaster.c for Hyper Estraier before 1.3.3 allows remote attackers to perform unauthorized actions…
–
CVSS
1.6%
EPSS
No
On KEV
Description
Cross-site request forgery (CSRF) vulnerability in the communicate function in estmaster.c for Hyper Estraier before 1.3.3 allows remote attackers to perform unauthorized actions as other users via unknown vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.6% · higher than 76% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HE
Hyper Estraier · Hyper Estraier
through 1.3.2; 1.0; 1.0.1; 1.0.2; 1.0.3; 1.0.4; +19 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3671
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3671
Vendor Advisory
http://secunia.com/advisories/21049
Patch
http://sourceforge.net/project/shownotes.php?release_id=432119
www.vupen.com
http://www.vupen.com/english/advisories/2006/2827
More from Hyper Estraier
–
CVE-2005-3421
estcmd in Hyper Estraier 1.0.1 on Windows systems allows remote attackers to read unauthorized files via a crafted search request for a filename that contains Unicode characters