CVE-2016-5100 | BDVDB-2026-81537 Detail

Description#

Froxlor before 0.9.35 uses the PHP rand function for random number generation, which makes it easier for remote attackers to guess the password reset token by predicting a value.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/Froxlor/Froxlor/commit/da4ec3e1b591de96675817a009e26e05e848a6ba

Exploit#

No public exploit known

History#

Version 12017-02-13Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.