| tiêu đề | Unauthenticated Password Hash Disclosure vulnerability |
|---|
| Mô tả | Vulnerability was found in SourceCodester Book Store Management System 1.0. An Unauthenticated Password Hash Disclosure vulnerability has been identified, which can be exploited to retrieve the password hashes of all existing user accounts.
The product(s): https://www.sourcecodester.com/php/15748/book-store-management-system-project-using-php-codeigniter-3-free-source-code.html
Affected product(s)/code base: https://www.sourcecodester.com/sites/default/files/download/oretnom23/bsms_ci.zip
Affected component(s): /bsms_ci/index.php/user/edit_user/{id} |
|---|
| Nguồn | ⚠️ https://github.com/lithonn/bug-report/tree/main/vendors/oretnom23/bsms_ci/passwd-hash |
|---|
| Người dùng | leecybersec (UID 36724) |
|---|
| Đệ trình | 30/11/2022 08:59 (cách đây 4 những năm) |
|---|
| Kiểm duyệt | 30/11/2022 11:20 (2 hours later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 214587 [SourceCodester Book Store Management System 1.0 edit_user password tiết lộ thông tin] |
|---|
| điểm | 20 |
|---|