| عنوان | atjiu https://github.com/atjiu/pybbs <=6.0.0 CAPTCHA reuse Vulnerability |
|---|
| الوصف | In the latest v6.0.0 version, the verification codes at the frontend login and registration functions do not automatically refresh, making them reusable. At the registration function, already registered usernames will display "Username already exists," which allows for username brute-forcing. After obtaining the username, one can proceed to the login function to continue brute-forcing the corresponding password. |
|---|
| المصدر | ⚠️ https://github.com/atjiu/pybbs/issues/199 |
|---|
| المستخدم | ZAST.AI (UID 87884) |
|---|
| ارسال | 25/07/2025 03:29 AM (1 سنة منذ) |
|---|
| الاعتدال | 04/08/2025 03:05 PM (10 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 318675 [atjiu pybbs حتى 6.0.0 Verification Code adminlogin/login الكشف عن المعلومات] |
|---|
| النقاط | 20 |
|---|