Vulnerability Database

308,681

Total vulnerabilities in the database

CVE-2002-0226

retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password on behalf of another user and use the sessionID to calculate the new password for that user.

  • Published: May 16, 2002
  • Updated: Nov 9, 2025
  • CVE: CVE-2002-0226
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
dcscripts / dcforum 6.21 6.21.x
dcscripts / dcforum 2000 2000.x
dcscripts / dcforum 5.0 5.0.x
dcscripts / dcforum 6.0 6.0.x