Description

The password reset functionality in Joomla! 1.5.x through 1.5.24 uses weak random numbers, which makes it easier for remote attackers to change the passwords of arbitrary users via unspecified vectors.

Remediation

References

CVE-2011-4321

Related Vulnerabilities

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2021-44855)

PostgreSQL Improper Authentication Vulnerability (CVE-2009-3231)

WordPress Plugin Locations Cross-Site Request Forgery (3.2.1)

WordPress Plugin MyLiveChat-Free Live Chat Plugin for WordPress Cross-Site Scripting (2.0.1)

Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2018-9019)

Severity

Medium

Classification

CVE-2011-4321

Tags

Missing Update Known Vulnerabilities