7.5

CVE-2008-3681

components/com_user/models/reset.php in Joomla! 1.5 through 1.5.5 does not properly validate reset tokens, which allows remote attackers to reset the "first enabled user (lowest id)" password, typically for the administrator.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Joomla ≫ Com User Version1.5
Joomla ≫ Com User Version1.5.1
Joomla ≫ Com User Version1.5.2
Joomla ≫ Com User Version1.5.3
Joomla ≫ Com User Version1.5.4
Joomla ≫ Com User Version1.5.5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 9.4% 0.948
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://developer.joomla.org/security/news/241-20080801-core-password-remind-functionality.html
http://secunia.com/advisories/31457
Vendor Advisory
http://securityreason.com/securityalert/4157
http://www.securityfocus.com/bid/30667
http://www.securitytracker.com/id?1020687
https://exchange.xforce.ibmcloud.com/vulnerabilities/44430
https://www.exploit-db.com/exploits/6234