Description
The search function in phpBB 2.x provides a search_id value that leaks the state of PHP's PRNG, which allows remote attackers to obtain potentially sensitive information, as demonstrated by a cross-application attack against WordPress, a different vulnerability than CVE-2006-0632.
Remediation
References
Related Vulnerabilities
WordPress Plugin WordPress Button Plugin MaxButtons Cross-Site Scripting (1.26.0)
Oracle Application Server CVE-2006-5359 Vulnerability (CVE-2006-5359)
Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2017-15095)
Ruby on Rails Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-0155)