| Titolo | Shenzhen Sixun Software Co., Ltd Sixun Shanghui 7 Group Business Management System Sixun Shanghui 7 unauthorized |
|---|
| Descrizione | User passwords can be reset by unauthorized traversal of user IDs and unauthorized calling of the reset password interface
https://github.com/zhangbuneng/an-arbitrary-user-password-reset-vulnerability-in-the-Sixun-Shanghui-7-Group/issues/1#issue-2877317082 |
|---|
| Fonte | ⚠️ https://github.com/zhangbuneng/an-arbitrary-user-password-reset-vulnerability-in-the-Sixun-Shanghui-7-Group/issues/1#issue-2877317082 |
|---|
| Utente | yaozhangYiqiyin (UID 81367) |
|---|
| Sottomissione | 25/02/2025 09:18 (2 anni fa) |
|---|
| Moderazione | 08/03/2025 08:28 (11 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 299009 [Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7 Reset Password Interface OperatorStop.asp OperId escalationi di privilegi] |
|---|
| Punti | 17 |
|---|