high7.5Public exploit code
CVE-2008-3681
components/com_user/models/reset.php in Joomla!
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Joomla! 1.5.x - 'Token' Remote Admin Change Password2008-08-12 · webapps · php · Verified
Impact
components/com_user/models/reset.php in Joomla! 1.5 through 1.5.5 does not properly validate reset tokens, which allows remote attackers to reset the "first enabled user (lowest id)" password, typically for the administrator.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Joomla | Com User | Versions 1.5, 1.5.1, 1.5.2, 1.5.3, 1.5.4, 1.5.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://developer.joomla.org/security/news/241-20080801-core-password-remind-functionality.html
- http://secunia.com/advisories/31457
- http://securityreason.com/securityalert/4157
- http://www.securityfocus.com/bid/30667
- http://www.securitytracker.com/id?1020687
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44430
- https://www.exploit-db.com/exploits/6234
- http://developer.joomla.org/security/news/241-20080801-core-password-remind-functionality.html
- http://secunia.com/advisories/31457
- http://securityreason.com/securityalert/4157
- http://www.securityfocus.com/bid/30667
- http://www.securitytracker.com/id?1020687
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44430
- https://www.exploit-db.com/exploits/6234