CVE-2016-5100

CVE-2016-5100 describes a critical vulnerability in Froxlor versions prior to 0.9.35, where the PHP rand function was used for generating password reset tokens. This weakness allows remote attackers to easily predict these tokens, leading to unauthorized password resets. With a CVSS score of 9.8 (CRITICAL), the vulnerability is easily exploitable over the network with low attack complexity, potentially resulting in complete compromise of confidentiality, integrity, and availability. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the inherent weakness poses a significant risk.