cbcvebase.
CVE-2010-4729
published 2011-02-08

CVE-2010-4729: Zikula before 1.2.3 does not use the authid protection mechanism for (1) the lostpassword form and (2) mailpasswd processing, which makes it easier for remote…

PriorityP423medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
0.52%
40.4th percentile
Zikula before 1.2.3 does not use the authid protection mechanism for (1) the lostpassword form and (2) mailpasswd processing, which makes it easier for remote attackers to generate a flood of password requests and possibly conduct cross-site request forgery (CSRF) attacks via multiple form submissions.

Affected

3 ranges
VendorProductVersion rangeFixed in
zikulazikula_application_framework<= 1.2.2—
zikulazikula_application_framework——
zikulazikula_application_framework——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.