Description

The password reset functionality in Joomla! 1.5.x through 1.5.24 uses weak random numbers, which makes it easier for remote attackers to change the passwords of arbitrary users via unspecified vectors.

Remediation

References

CVE-2011-4321

Related Vulnerabilities

WordPress Plugin Car Rental by BestWebSoft Cross-Site Scripting (1.0.4)

MediaWiki Insufficiently Protected Credentials Vulnerability (CVE-2020-35623)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-6817)

WordPress Plugin Cookie Notice & Consent Banner for GDPR & CCPA Compliance Cross-Site Scripting (1.7.1)

CrushFTP Server Improper Neutralization of CRLF Sequences ('CRLF Injection') Vulnerability (CVE-2017-14037)

Severity

Medium

Classification

CVE-2011-4321

Tags

Missing Update Known Vulnerabilities