Froxlor prior to 0.9.35 uses the PHP rand function for random number generation, which makes it easier for remote malicious users to guess the password reset token by predicting a value.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
froxlor froxlor |