VULNERABILITY INTELLIGENCE
CVE-2010-4728
CVSS score5 MEDIUM
EPSS probability0.95%
CISA KEVNot currently listed
Published2011-02-08
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N
Description
Zikula before 1.3.1 uses the rand and srand PHP functions for random number generation, which makes it easier for remote attackers to defeat protection mechanisms based on randomization by predicting a return value, as demonstrated by the authid protection mechanism.