CVE-2002-0226: Undefined Security Weakness

retrievepassword.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password on behalf of another user and use the sessionID to calculate the new password for that user...

And another (same) bug in DCForum at user registration process (dcscripts.com)

When registering a user and not allowing him to choose a password, a password is generated by the same algorithm as the algorithm used when creating new password for a user who lost it. Once again, the password is predictable, thus bypasses all limitations of using a valid mailbox for user...

Несанкционированный доступ в DCForum (unauthorized access)

Предсказуемый механизм генерации новго пароля...