| शीर्षक | funadmin v7.1.0-rc4 CWE-640: Weak Password Recovery Mechanism for Forgotten Password |
|---|
| विवरण | In app/frontend/controller/Member.php, the repass function implements password reset verification by comparing the forget_code cookie with the vercode value provided in the POST request. Because both values are controlled by the client and are not securely bound to the target user or validated server-side, an attacker can bypass the verification process and modify the password of any user by altering the user ID parameter. |
|---|
| स्रोत | ⚠️ https://github.com/I4m6da/CVE/issues/2 |
|---|
| उपयोगकर्ता | I4m6da (UID 95320) |
|---|
| सबमिशन | 07/02/2026 01:10 PM (8 महीनों पहले) |
|---|
| संयम | 20/02/2026 07:57 PM (13 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 347206 [funadmin तक 7.1.0-rc4 Member.php repass forget_code/vercode अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|