| Title | Shenzhen Sixun Software Co., Ltd Sixun Shanghui 7 Group Business Management System Sixun Shanghui 7 unauthorized |
|---|
| Description | User passwords can be reset by unauthorized traversal of user IDs and unauthorized calling of the reset password interface
https://github.com/zhangbuneng/an-arbitrary-user-password-reset-vulnerability-in-the-Sixun-Shanghui-7-Group/issues/1#issue-2877317082 |
|---|
| Source | ⚠️ https://github.com/zhangbuneng/an-arbitrary-user-password-reset-vulnerability-in-the-Sixun-Shanghui-7-Group/issues/1#issue-2877317082 |
|---|
| User | yaozhangYiqiyin (UID 81367) |
|---|
| Submission | 02/25/2025 09:18 (1 Year ago) |
|---|
| Moderation | 03/08/2025 08:28 (11 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 299009 [Shenzhen Sixun Software Sixun Shanghui Group Business Management System 7 Reset Password Interface OperatorStop.asp OperId improper authorization] |
|---|
| Points | 17 |
|---|