CVE-2006-0153
427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and...
427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote attackers to bypass authentication by using a valid username and usertype and setting the authenticated cookie.
Exploit likelihood
What each source reports
NVD Score used
427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote attackers to bypass authentication by using a valid username and usertype and setting the authenticated cookie.
- Record
CVE-2006-0153- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote attackers to bypass authentication by using a valid username and usertype and setting the authenticated cookie.
- Record
CVE-2006-0153- Updated
- 2026-11-02
EUVDEUVD-2006-0161 No score
427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote attackers to bypass authentication by using a valid username and usertype and setting the authenticated cookie.
- Record
EUVD-2006-0161- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pr2p-6w36-gp9f No score
427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and...
427BB 2.2 and 2.2.1 verifies authentication credentials based on the username, authenticated, and usertype cookies, which allows remote attackers to bypass authentication by using a valid username and usertype and setting the authenticated cookie.
- Record
GHSA-pr2p-6w36-gp9f- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | 427BB 2.2 - Authentication Bypass | 2006-01-09 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0153 is a high vulnerability (CVSS 7.5) in 427bb Fourtwosevenbb, published January 10, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.38%, the 88th percentile. No source names a fixed version.
References
securityfocus.com/archive/1/421326/100/0/threaded
secunia.com/advisories/18354
vupen.com/english/advisories/2006/0091
exchange.xforce.ibmcloud.com/vulnerabilities/24038
evuln.com/vulns/18/summary.html
osvdb.org/22274
nvd.nist.gov/vuln/detail/CVE-2006-0153
github.com/advisories/GHSA-pr2p-6w36-gp9f