CVE

Id
33798  
CVE No.
CVE-2008-3681  
Status
Candidate  
Description
components/com_user/models/reset.php in Joomla! 1.5 through 1.5.5 does not properly validate reset tokens, which allows remote attackers to reset the "first enabled user (lowest id)" password, typically for the administrator.  
Phase
Assigned (20080814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
368616 33798 CVE-2008-3681 MILW0RM:6234  View
368617 33798 CVE-2008-3681 URL:http://www.milw0rm.com/exploits/6234  View
368618 33798 CVE-2008-3681 CONFIRM:http://developer.joomla.org/security/news/241-20080801-core-password-remind-functionality.html  View
368619 33798 CVE-2008-3681 BID:30667  View
368620 33798 CVE-2008-3681 URL:http://www.securityfocus.com/bid/30667  View
368621 33798 CVE-2008-3681 SECTRACK:1020687  View
368622 33798 CVE-2008-3681 URL:http://www.securitytracker.com/id?1020687  View
368623 33798 CVE-2008-3681 SECUNIA:31457  View
368624 33798 CVE-2008-3681 URL:http://secunia.com/advisories/31457  View
368625 33798 CVE-2008-3681 SREASON:4157  View
368626 33798 CVE-2008-3681 URL:http://securityreason.com/securityalert/4157  View
368627 33798 CVE-2008-3681 XF:joomla-reset-security-bypass(44430)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41717 JVNDB-2009-002724 EMC Documentum ApplicationXtender Workflow のサーバにおけるディレクトリトラバーサルの脆弱性 EMC Documentum ApplicationXtender Workflow のサーバの Admin Agent サービスの aws_tmxn.exe には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2008-3685 33798 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002724.html  View