Default credentials

The myrand function in functions.php in MyBB aka MyBulletinBoard before 1.4.12 does not properly use the PHP mtrand function, which makes it easier for remote attackers to obtain access to an arbitrary account by requesting a reset of the account's password, and then conducting a brute-force atta...

CVE-2010-4626

The myrand function in functions.php in MyBB aka MyBulletinBoard before 1.4.12 does not properly use the PHP mtrand function, which makes it easier for remote attackers to obtain access to an arbitrary account by requesting a reset of the account's password, and then conducting a brute-force atta...

CVE-2010-4626

CVE-2010-4626 affects MyBB up to version 1.4.11 where the my_rand function in functions.php does not properly use PHP’s mt_rand, enabling remote attackers to subvert password reset flows and perform brute-force account access. The root cause is inadequate randomness in the reset mechanism. The pu...