Invia #264711: ForU CMS ForU CMS dev Official version Arbitrary Administrator Password Resetinformazioni

TitoloForU CMS ForU CMS dev Official version Arbitrary Administrator Password Reset
DescrizioneA critical vulnerability has been identified in ForU CMS, affecting the backend administrator login functionality. As a result, any user can access an unauthorized interface to reset the administrator password and gain access to the backend.
Fonte⚠️ https://github.com/mi2acle/forucmsvuln/blob/master/passwordreset.md
Utente
 Mi2ac1e (UID 61142)
Sottomissione09/01/2024 11:25 (3 anni fa)
Moderazione11/01/2024 13:39 (2 days later)
StatoAccettato
Voce VulDB250444 [ForU CMS fino a 2020-06-23 index.php?act=reset_admin_psw escalationi di privilegi]
Punti16

Do you want to use VulDB in your project?

Use the official API to access entries easily!