提出 #263229: Engineers Online Portal Web 1.0 Register an Engineer with the Password 1 -> weak Password Policy情報

タイトルEngineers Online Portal Web 1.0 Register an Engineer with the Password 1 -> weak Password Policy
説明Dear Janno palacios, I hope this message finds you well. I would like to express my gratitude for your valuable time and attention. My brother and I have successfully identified a medium-level vulnerability, "Register an Engineer with the Password 1 -> weak Password Policy", within your Engineers Online Portal Application. Consequently, I am writing this email to provide you with a comprehensive Proof of Concept, including a video demonstration and relevant screenshots. Furthermore, I would like to kindly request your consideration in assigning a CVE identifier to this discovery. I have attached a previous example for the same application for your reference. Link for the previous CVE https://vuldb.com/?id.249182 Thank you once again for your time, and I look forward to your response. Sincerely, Ahmed Hassan ---- Register an Engineer with the Password 1 -> weak Password Policy successfully set the password to 1 which is a weak Password Policy. Thank you for watching :)
ソース⚠️ https://mega.nz/file/2d8GiY4Z#QSKItMUgIsW1-A-QPs9dgUSd2SCZfDg4aHORttFpUF0
ユーザー
 ahmed8199 (UID 60803)
送信2024年01月06日 15:19 (3 年 ago)
モデレーション2024年01月09日 15:14 (3 days later)
ステータス承諾済み
VulDBエントリ250115 [SourceCodester Engineers Online Portal 1.0 signup_teacher.php Password 弱い認証]
ポイント20

Do you want to use VulDB in your project?

Use the official API to access entries easily!