Lucene search
HistoryNov 06, 2006 - 6:07 p.m.
CVE-2006-5737
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.2 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
PunBB uses a predictable cookie_seed value that can be derived from the time of registration of the superadmin account (installation time), which might allow local users to perform unauthorized actions.
Affected configurations
Node
punbbpunbbMatch1.2.14
Related
cve
cve
CVE-2006-5737
2006-11-06 18:07:00
CVE-2008-1484
2008-03-24 23:44:00
cvelist
cvelist
CVE-2006-5737
2006-11-06 18:00:00
CVE-2008-1484
2008-03-24 23:00:00
nvd
nvd
CVE-2008-1484
2008-03-24 23:44:00
prion
prion
Design/Logic Flaw
2008-03-24 23:44:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.2 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2006-5737