| 제목 | Engineers Online Portal Web 1.0 After the password change user must be logged out |
|---|
| 설명 | Dear Janno palacios,
I hope this message finds you well.
I would like to express my gratitude for your valuable time and attention.
My brother and I have successfully identified a medium-level vulnerability, "After the password change user must be logged out", within your Engineers Online Portal Application.
Consequently, I am writing this email to provide you with a comprehensive Proof of Concept, including a video demonstration and relevant screenshots.
Furthermore, I would like to kindly request your consideration in assigning a CVE identifier to this discovery. I have attached a previous example for the same application for your reference.
Link for the previous CVE https://vuldb.com/?id.249182
Thank you once again for your time, and I look forward to your response.
Sincerely,
Ahmed Hassan
-----
The user should be logged out from all open sessions after changing the password cause this is a process the user does to protect his account in case any attacker is inside his/her account.
So by changing the password, all users must authenticate themselves again. In this way, the hacker will be thrown out of the session and the user can protect his/her account.
after the password change user must be logged out
let see :)
As you can see i have not been logged out from any session.
Whether from the current or from the private browser.
Thank you for watching :) |
|---|
| 원천 | ⚠️ https://mega.nz/file/yEsSwK6D#--ygVt0NtzhZdqVxvjaPLCYfnIeBSyf76KaRozOxfVo |
|---|
| 사용자 | ahmed8199 (UID 60803) |
|---|
| 제출 | 2024. 01. 02. PM 03:19 (2 연령 ago) |
|---|
| 모더레이션 | 2024. 01. 06. AM 09:30 (4 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 249816 [SourceCodester Engineers Online Portal 1.0 Password Change change_password_teacher.php 약한 인증] |
|---|
| 포인트들 | 20 |
|---|