Project: Joomla!
Severity: High
Versions: 1.7.2 and all 1.6.x versions

Weak random number generation during password reset leads to possibility of changing a user's password. Upgrade to the latest Joomla! version to patch this issue.

Project: Joomla!
Severity: High
Versions: 1.5.24 and all earlier 1.5 versions

Weak random number generation during password reset leads to possibility of changing a user's password. Upgrade to the latest Joomla! 1.5 version (1.5.25 or later).