| Titre | ForU CMS ForU CMS dev Official version Arbitrary Administrator Password Reset |
|---|
| Description | A critical vulnerability has been identified in ForU CMS, affecting the backend administrator login functionality. As a result, any user can access an unauthorized interface to reset the administrator password and gain access to the backend. |
|---|
| La source | ⚠️ https://github.com/mi2acle/forucmsvuln/blob/master/passwordreset.md |
|---|
| Utilisateur | Mi2ac1e (UID 61142) |
|---|
| Soumission | 09/01/2024 11:25 (il y a 3 ans) |
|---|
| Modérer | 11/01/2024 13:39 (2 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 250444 [ForU CMS jusqu’à 2020-06-23 index.php?act=reset_admin_psw élévation de privilèges] |
|---|
| Points | 16 |
|---|