CVE ID:	CVE-2008-3681
Description:	components/com_user/models/reset.php in Joomla! 1.5 through 1.5.5 does not properly validate reset tokens, which allows remote attackers to reset the "first enabled user (lowest id)" password, typically for the administrator.
Test IDs:	1.3.6.1.4.1.25623.1.0.61448
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3681 BugTraq ID: 30667 http://www.securityfocus.com/bid/30667 https://www.exploit-db.com/exploits/6234 http://www.securitytracker.com/id?1020687 http://secunia.com/advisories/31457 http://securityreason.com/securityalert/4157 XForce ISS Database: joomla-reset-security-bypass(44430) https://exchange.xforce.ibmcloud.com/vulnerabilities/44430