| शीर्षक | Yunzmall <=2.4.2 Arbitrary User Password Reset Vulnerability |
|---|
| विवरण | YunzMall version ≤2.4.2 has an Arbitrary User Password Reset Vulnerability in the /app/platform/controllers/ResetpwdController.php file, which allows unauthenticated attackers to reset any user's password, including the admin's, by sending a crafted POST request to the /admin/changePwd endpoint. |
|---|
| स्रोत | ⚠️ https://note.zhaoj.in/share/DsijzdQDJSAp |
|---|
| उपयोगकर्ता | glzjin (UID 59815) |
|---|
| सबमिशन | 29/12/2024 02:57 PM (2 साल पहले) |
|---|
| संयम | 08/01/2025 06:04 PM (10 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 290819 [YunzMall तक 2.4.2 HTTP POST Request ResetpwdController.php changePwd pwd अधिकार वृद्धि] |
|---|
| अंक | 17 |
|---|