CVE-2008-3681

Joomla! versions 1.5 through 1.5.5 are vulnerable to a flaw in the reset token validation mechanism located in components/com_user/models/reset.php . Due to insufficient validation, an unauthenticated remote attacker can forge tokens to reset the password of the first enabled user (lowest ID) , w...