retrieve_password.pl in DCForum 6.x and 2000 generates predictable new passwords based on a sessionID, which allows remote attackers to request a new password on behalf of another user and use the sessionID to calculate the new password for that user.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dcforum | Dcscripts | 5.0 (including) | 5.0 (including) |
| Dcforum | Dcscripts | 6.0 (including) | 6.0 (including) |
| Dcforum | Dcscripts | 6.21 (including) | 6.21 (including) |
| Dcforum | Dcscripts | 2000 (including) | 2000 (including) |