Com User

com_user

Vendor: Joomla • 1 CVE

CVEs (1)

CVE

VENDORS

PRODUCTS

UPDATED

PUBLISHED

CVSS

CVE-2008-3681

1Joomla

1Com User

Apr 23, 2026

Aug 14, 2008

N/A· v4

N/A· v3

7.5 HIGH· v2

components/com_user/models/reset.php in Joomla! 1.5 through 1.5.5 does not properly validate reset tokens, which allows remote attackers to reset the "first enabled user (lowest id)" password, typically for the administr...Show more