| शीर्षक | PHPGurukul Online Library Management System 3.0 Unverified Password Change |
|---|
| विवरण | During the security review of "Online Library Management System",I discovered a passwd reset vulnerability in the "/change-password.php" file. In the system, the password reset function only relies on email and phone number verification, without introducing secondary verification mechanisms (such as verification codes and tokens), allowing attackers to directly reset passwords by collecting basic user information. |
|---|
| स्रोत | ⚠️ https://github.com/SECWG/cve/issues/4 |
|---|
| उपयोगकर्ता | WenGui (UID 82184) |
|---|
| सबमिशन | 06/03/2025 06:12 AM (2 साल पहले) |
|---|
| संयम | 07/03/2025 04:35 PM (1 day later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 298951 [PHPGurukul Online Library Management System 3.0 /change-password.php email/phone number अधिकार वृद्धि] |
|---|
| अंक | 19 |
|---|