CVE-2006-0632 | BDVDB-2026-15065 Detail

Description#

The gen_rand_string function in phpBB 2.0.19 uses insufficiently random data (small value space) to create the activation key ("validation ID") that is sent by e-mail when establishing a password, which makes it easier for remote attackers to obtain the key and modify passwords for existing accounts or create new accounts.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12006-02-10Record published in the CVE List.
2. Version 22024-08-07Most recent update recorded in the CVE List.