CVE-2006-5597
join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or...
join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or modify arbitrary user accounts via modified (1) frmMailBox and (2) frmUserPass parameters.
Exploit likelihood
What each source reports
NVD Score used
join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or modify arbitrary user accounts via modified (1) frmMailBox and (2) frmUserPass parameters.
- Record
CVE-2006-5597- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or modify arbitrary user accounts via modified (1) frmMailBox and (2) frmUserPass parameters.
- Record
CVE-2006-5597- Updated
- 2026-11-02
EUVDEUVD-2006-5582 No score
join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or modify arbitrary user accounts via modified (1) frmMailBox and (2) frmUserPass parameters.
- Record
EUVD-2006-5582- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3vcr-vjpj-p33c No score
join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or...
join.asp in MiniHTTP Web Forum & File Server PowerPack 4.0 allows remote attackers to add or modify arbitrary user accounts via modified (1) frmMailBox and (2) frmUserPass parameters.
- Record
GHSA-3vcr-vjpj-p33c- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | MiniHTTPServer Web Forum & File Sharing Server 4.0 - Add User | 2006-10-25 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-5597 is a high vulnerability (CVSS 7.5) in Minihttp Web Forum File Sharing Sever Powerpack, published October 28, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 2.58%, the 85th percentile. No source names a fixed version.