CVE-2010-4728

Zikula before 1.3.1 uses the rand and srand PHP functions for random number generation, which makes it easier for remote attackers to defeat protection…

published February 8, 2011

CVSS
—
EPSS
1%
Percentile
60.8
In the wild
Unconfirmed
What it is

Zikula before 1.3.1 uses the rand and srand PHP functions for random number generation, which makes it easier for remote attackers to defeat protection mechanisms based on randomization by predicting a return value, as demonstrated by the authid protection mechanism.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00949 · 60.8th percentile
Published
2011-02-08T21:00Z
EPSS history
Timeline
  • 08 FEB 21:00Z
    Zikula before 1.3.1 uses the rand and srand PHP functions for random number generation, which makes it easier for remote attackers to defeat protection…
    cvelistv5