CVE-2006-5737: Punbb

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

PunBB uses a predictable cookie_seed value that can be derived from the time of registration of the superadmin account (installation time), which might allow local users to perform unauthorized actions.

Affected products

• Punbb Punbb: version 1.2.14 only

Published 2006-11-06. Last modified 2026-06-16.