Lucene search

K
hackeroneHoangn14H1:792895
HistoryFeb 11, 2020 - 3:46 a.m.

Revive Adserver: bypass old password with array in /admin/account-user-email.php

2020-02-1103:46:24
hoangn14
hackerone.com
146

0.001 Low

EPSS

Percentile

43.8%

Short Description

  • attacker maybe change email or password without enter old password with array param.
  • version:revive-adserver-5.0.4
  • os :window

POC

{F712486}

Impact

attacker maybe change email or password without enter old password

0.001 Low

EPSS

Percentile

43.8%

Related for H1:792895