Secunia

Some vulnerabilities and a security issue have been reported in Joomla!, where some have an unknown impact and others can potentially be exploited by malicious people to conduct brute force attacks.

1) The application uses the insufficiently random function "mt_rand()" to generate password reset tokens. This can can potentially be exploited to guess a generated token or password.

2) An input validation error exists within JRequest, which can be exploited to inject certain characters into returned data.

3) An input validation error exists within the "mailto" component before sending mails.

The vulnerabilities and security issue are reported in versions prior to version 1.5.7.

Solution
Update to version 1.5.7.

Provided and/or discovered by
1) Stefan Esser.
2) The vendor credits Andrew Eddie.
3) The vendor credits Phil Taylor.

Changelog
Further details available in Customer Area

Original Advisory
http://www.joomla.org/announcements/release-news/5212-joomla-157-security-release-now-available.html

Stefan Esser:
http://www.sektioneins.de/advisories/SE-2008-04.txt

Deep Links
Links available in Customer Area