https://www.italiamac.it/work4net/2008/08/vulnerabilita-joomla-15-reset-password-administrator/