pyForum version 1.0.3 suffers from a password reset vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/83305/BMSA-2009-07.txt
Source: https://packetstormsecurity.com/files/83305/pyForum-1.0.3-Backdoor.html