EUVD-2010-4694

Malware in sbrugna...

CVE-2010-4729

Zikula before 1.2.3 does not use the authid protection mechanism for 1 the lostpassword form and 2 mailpasswd processing, which makes it easier for remote attackers to generate a flood of password requests and possibly conduct cross-site request forgery CSRF attacks via multiple form submissions...

CVE-2010-4729

Zikula before 1.2.3 does not use the authid protection mechanism for 1 the lostpassword form and 2 mailpasswd processing, which makes it easier for remote attackers to generate a flood of password requests and possibly conduct cross-site request forgery CSRF attacks via multiple form submissions...

CVE-2010-4729

Zikula

CVE-2010-4728: Undefined Security Weakness

Zikula before 1.3.1 uses the rand and srand PHP functions for random number generation, which makes it easier for remote attackers to defeat protection mechanisms based on randomization by predicting a return value, as demonstrated by the authid protection mechanism...

PT-2011-1678

Name of the Vulnerable Software and Affected Versions Zikula versions prior to 1.3.1 Description The issue concerns the use of the rand and srand PHP functions for random number generation, making it easier for remote attackers to predict return values and defeat protection mechanisms based on...