← Database

CVE-2002-0226

HIGH CVSS: 7.5 Published: 2002-05-16 Modified: 2026-06-16

Description

retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password on behalf of another user and use the sessionID to calculate the new password for that user.

Affected Platforms

Dcscripts Dcforum

Weakness Type

NVD-CWE-Other

References