CVE-2006-0632

The gen_rand_string function in phpBB 2.0.19 uses insufficiently random data (small value space) to create the activation key ("validation ID") that is sent by…

published February 10, 2006

CVSS
—
EPSS
3%
Percentile
84.9
In the wild
Unconfirmed
What it is

The gen_rand_string function in phpBB 2.0.19 uses insufficiently random data (small value space) to create the activation key ("validation ID") that is sent by e-mail when establishing a password, which makes it easier for remote attackers to obtain the key and modify passwords for existing accounts or create new accounts.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02561 · 84.9th percentile
Published
2006-02-10T11:00Z
EPSS history
Timeline
  • 10 FEB 11:00Z
    The gen_rand_string function in phpBB 2.0.19 uses insufficiently random data (small value space) to create the activation key ("validation ID") that is sent by…
    cvelistv5