Design/Logic Flaw

2015-01-0311:59:00

PRIOn knowledge base

www.prio-n.com

7.3 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

52.3%

JSON

The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to modify the administrator’s password by specifying the administrator’s e-mail address in the email parameter.

CPENameOperatorVersion
sweetriceeq0.6.7.1

CPE	Name	Operator	Version
	sweetrice	eq	0.6.7.1

References

www.htbridge.com/advisory/HTB22667