Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
MyBB Cryptographic Issues Vulnerability - CVE-2010-4626 - Vulnerability Database
MyBB

MyBB Cryptographic Issues Vulnerability - CVE-2010-4626

Medium
Reference: CVE-2010-4626
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2010-4626
Title: MyBB Cryptographic Issues Vulnerability
Overview:

The my_rand function in functions.php in MyBB (aka MyBulletinBoard) before 1.4.12 does not properly use the PHP mt_rand function which makes it easier for remote attackers to obtain access to an arbitrary account by requesting a reset of the account39s password and then conducting a brute-force attack.