CVEvulnerability

CVE-2006-5737

7.2 HIGH Published 2006-11-06 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2006-11-06
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

PunBB uses a predictable cookie_seed value that can be derived from the time of registration of the superadmin account (installation time), which might allow local users to perform unauthorized actions.

Affected configurations

• punbb punbb 1.2.14

References

http://securitytracker.com/id?1017131 securitytracker.com
http://www.osvdb.org/30134 www.osvdb.org
http://www.securityfocus.com/archive/1/450055/100/0/threaded www.securityfocus.com
http://www.wargan.org/index.php/2006/10/29/4-punbb-1213-multiple-vulnerabilities www.wargan.org
http://securitytracker.com/id?1017131 securitytracker.com
http://www.osvdb.org/30134 www.osvdb.org
http://www.securityfocus.com/archive/1/450055/100/0/threaded www.securityfocus.com
http://www.wargan.org/index.php/2006/10/29/4-punbb-1213-multiple-vulnerabilities www.wargan.org