CVE-2006-5737

PunBB uses a predictable cookie_seed value that can be derived from the time of registration of the superadmin account (installation time), which might allow local users to perform unauthorized actions.

Score

CVSS 2.0 7.2 High

Status

Modified - cve@mitre.org

Published

2006-11-06

Last modified

2024-08-07

Affected products

• Punbb (Punbb)

References

• http://securitytracker.com/id?1017131
• http://www.osvdb.org/30134
• http://www.securityfocus.com/archive/1/450055/100/0/threaded
• http://www.wargan.org/index.php/2006/10/29/4-punbb-1213-multiple-vulnerabilities