| शीर्षक | yzro Networks Smart S85F management platform has a vulnerability in improper password reset |
|---|
| विवरण | The system under consideration contains a high vulnerability that allows unauthorized users to reset the password of the admin account. This vulnerability arises due to an insecure POST request method in the system's password reset functionality.
By sending a POST request with the parameters mode=findpwd&find_username=admin&txt_newpwd=123456, an attacker can initiate a password reset for the 'admin' account without proper authentication or authorization. |
|---|
| स्रोत | ⚠️ https://github.com/Changboqian/cve/blob/main/reset_password_improperly.md |
|---|
| उपयोगकर्ता | changboqian (UID 57692) |
|---|
| सबमिशन | 03/11/2023 07:55 AM (3 साल पहले) |
|---|
| संयम | 11/11/2023 09:29 AM (8 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 244992 [Byzoro Smart S85F Management Platform V31R02B10-01 /login.php txt_newpwd अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|