| 标题 | QileCMS ≤v1.1.3 Authorization Bypass |
|---|
| 描述 | QileCMS ≤v1.1.3 has an arbitrary account password reset vulnerability. An attacker can send a verification code to an email address they control and use this code to reset the password of any user account, thereby gaining full control over the target account. This vulnerability poses a significant security risk to user accounts. |
|---|
| 来源 | ⚠️ https://note.zhaoj.in/share/PZZ7IeudhULs |
|---|
| 用户 | glzjin (UID 59815) |
|---|
| 提交 | 2024-10-05 10時29分 (2 年前) |
|---|
| 管理 | 2024-10-12 12時04分 (7 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 280234 [QileCMS 直到 1.1.3 Verification Code Forget.php sendEmail 权限提升] |
|---|
| 积分 | 18 |
|---|