CVE Catalog
CVE-2016-5100
CriticalSummary
Froxlor before 0.9.35 uses the PHP rand function for random number generation, which makes it easier for remote attackers to guess the password reset token by predicting a value.
Risk Assessment
Attackers may gain access to user accounts by predicting the password reset token, posing a serious security risk to the system.
Recommendation
It is recommended to upgrade Froxlor to version 0.9.35 or later to mitigate this vulnerability.
Original NVD description (English source)
Froxlor before 0.9.35 uses the PHP rand function for random number generation, which makes it easier for remote attackers to guess the password reset token by predicting a value.