CVE-2006-5737 in PunBB

Riassunto

di MITRE

PunBB uses a predictable cookie_seed value that can be derived from the time of registration of the superadmin account (installation time), which might allow local users to perform unauthorized actions.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Prenotare: 06/11/2006
• Divulgazione: 06/11/2006
• Moderazione: accettato
• Voce: VDB-33130
• CPE: pronto
• CWE: CWE-285 (non confermato)
• CVSS: 7.2 (NVD)
• EPSS: 0.00320
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2006-5737
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2006-5737
• CVE Details: https://www.cvedetails.com/cve/CVE-2006-5737/