CVE-2021-31646: Improper Restriction of Excessive Authentication Attempts

Gestsup before 3.2.10 allows account takeover through the password recovery functionality remote. The affected component is the file forgotpwd.php - it uses a weak algorithm for the generation of password recovery tokens the PHP uniqueid function, allowing a brute force attack...

PT-2021-19460

Name of the Vulnerable Software and Affected Versions Gestsup versions prior to 3.2.10 Description The issue allows for account takeover through the password recovery functionality remotely. It is caused by a weak algorithm used for generating password recovery tokens in the forgot pwd.php file,...

Gestsup 安全漏洞

GESTSUP is a software application from the French company GESTSUP. It is 100% web-based SUPport MANAGEMENT software that manages tickets and devices. A security vulnerability exists in versions prior to Gestsup 3.2.10 that allows brute-force breaking attacks...

Getsup 3.1.46 XSS Vulnerability

Exploit for php platform in category web applications Title: Getsup 3.1.46 Version 3.1 patch 46 All vers affected Author: @Eawhitehat - Eren Arslan Vendor: https://gestsup.fr/ Demo available : https://demo.gestsup.fr/ User: admin Password: admin Software Link:...