nosqli-flintcms

nosqli-flintcms 基于 CVE-2018-3783（flintcms 1.1.9 上的权限提升）的盲注 noSQL 注入案例研究实验室。 该漏洞最初由 Benoit Côté-Jodoin 发现。你可以在 HackerOne 上阅读原始报告。 先决条件 docker-compose 限制 ：我们移除了 sendEmail 函数，因此服务器无法发送邮件。不过，重置密码时它仍然可以生成令牌。 实验室搭建 1. 环境变量位于 docker-compose.yml 中，你可以在此更改数据库的凭据。 2. 运行 docker-compose up，等待容器构建完毕并正常运行。 3. ...

EUVD-2018-0407

Malware in sbrugna...

GHSA-JHQ3-57XH-6643 Privilege Escalation due to Blind NoSQL Injection in flintcms

Versions of flintcms before version 1.1.10 are vulnerable to account takeover due to blind MongoDB injection in the password reset. Recommendation Update to version 1.1.10 or later...

Privilege Escalation due to Blind NoSQL Injection in flintcms

Versions of flintcms before version 1.1.10 are vulnerable to account takeover due to blind MongoDB injection in the password reset. Recommendation Update to version 1.1.10 or later...

Flintcms Privilege Vulnerability

flintcms is a content management system CMS. A power-lifting vulnerability exists in flintcms 1.1.9 and earlier versions. An attacker can exploit this vulnerability to compromise an account...

Design/Logic Flaw

A privilege escalation detected in flintcms versions = 1.1.9 allows account takeover due to blind MongoDB injection in password reset...

CVE-2018-3783

A privilege escalation detected in flintcms versions = 1.1.9 allows account takeover due to blind MongoDB injection in password reset...

CVE-2018-3783

A privilege escalation detected in flintcms versions = 1.1.9 allows account takeover due to blind MongoDB injection in password reset...

CVE-2018-3783

CVE-2018-3783 applies to FlintCMS. Several advisories confirm a privilege escalation vulnerability in FlintCMS versions

CVE-2018-3783

A privilege escalation detected in flintcms versions = 1.1.9 allows account takeover due to blind MongoDB injection in password reset...

CVE-2018-3783: Improper Neutralization of Special Elements used in an SQL Command

A privilege escalation detected in flintcms versions = 1.1.9 allows account takeover due to blind MongoDB injection in password reset...

Query Injection

flintcms is vulnerable to privilege escalation attacks. The library does not sanitize user input, allowing a malicious user to inject and execute arbitrary MongoDB queries through the password reset page...

Node.js third-party modules: [flintcms] Account takeover due to blind MongoDB injection in password reset

I would like to report a privilege escalation vulnerability in flintcms. It allows to reset a known user password, extract its password reset token and reset its password to then access the account. Module module name: flintcms version: v.1.1.9 npm page: https://www.npmjs.com/package/flintcms...