CVE-2010-4728

2011-02-0821:00:00

mitre

www.cve.org

zikula

vulnerability

php

rand function

AI Score

6.7

Confidence

Low

EPSS

0.002

Percentile

51.6%

JSON

Zikula before 1.3.1 uses the rand and srand PHP functions for random number generation, which makes it easier for remote attackers to defeat protection mechanisms based on randomization by predicting a return value, as demonstrated by the authid protection mechanism.

References

code.zikula.org/core/ticket/2009