CVE-2006-5729: Yazd Discussion Forum

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

Yazd Discussion Forum before 3.0 beta does not properly manage forum permissions, which allows remote authenticated users to (1) reply to a message in an arbitrary forum, if authorized to create a message in any forum; and (2) perform certain unauthorized forum actions, related to an "error in how the permissions were assembled" that assigns extra permissions to users.

Affected products

• Yazd Yazd Discussion Forum: version 1.0 only; version 2.0 only; version 2.1 only; version 2.2 only; version 2.3 only; version 2.4 only

Published 2006-11-06. Last modified 2026-06-16.