CVE-2010-4729
Zikula before 1.2.3 does not use the authid protection mechanism for (1) the lostpassword form and (2) mailpasswd processing, which makes it easier for remote attackers to gener…
Published: 2011-02-08 · CVSS: Unscored
Zikula before 1.2.3 does not use the authid protection mechanism for (1) the lostpassword form and (2) mailpasswd processing, which makes it easier for remote attackers to generate a flood of password requests and possibly conduct cross-site request forgery (CSRF) attacks via multiple form submissions.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7