6 matches found
CVE-2019-19735
class.userpeer.php in MFScripts YetiShare 3.5.2 through 4.5.3 uses an insecure method of creating password reset hashes based only on microtime, which allows an attacker to guess the hash and set the password within a few hours by bruteforcing...
CVE-2019-19735
creationtimestamp| type| source ---|---|--- 2024-03-18 15:16:36+00:00| seen| https://t.me/ctinow/210616 2026-06-29 22:37:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mphkglmqtq2r...
CVE-2019-19735
class.userpeer.php in MFScripts YetiShare 3.5.2 through 4.5.3 uses an insecure method of creating password reset hashes based only on microtime, which allows an attacker to guess the hash and set the password within a few hours by bruteforcing...
CVE-2019-19735
The CVE-2019-19735 issue affects Mellow Fish YetiShare (MFScripts YetiShare) versions 3.5.2–4.5.3, specifically in class.userpeer.php. The root cause is an insecure method for generating password reset hashes based solely on microtime, enabling an attacker to brute-force the hash and set a passwo...
