Aggelos Kiayias

A vulnerabilidade permite alterações não autorizadas de senha.

The issue allows remote attackers to change the passwords of arbitrary users due to the use of weak random numbers for password reset tokens.

The issue concerns multiple cross-site scripting (XSS) vulnerabilities in the administration subsystem. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.