EUVD-2018-1899

Malware in sbrugna...

CVE-2018-1000501

Instant Update CMS contains a Password Reset Vulnerability vulnerability in /iu-application/controllers/administration/auth.php that can result in Account Tackover. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in v0.3.3...

CVE-2018-1000501

Instant Update CMS contains a Password Reset Vulnerability vulnerability in /iu-application/controllers/administration/auth.php that can result in Account Tackover. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in v0.3.3...

Design/Logic Flaw

Instant Update CMS contains a Password Reset Vulnerability vulnerability in /iu-application/controllers/administration/auth.php that can result in Account Tackover. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in v0.3.3...

CVE-2018-1000501

Instant Update CMS contains a Password Reset Vulnerability vulnerability in /iu-application/controllers/administration/auth.php that can result in Account Tackover. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in v0.3.3...

CVE-2018-1000501

Instant Update CMS contains a Password Reset Vulnerability vulnerability in /iu-application/controllers/administration/auth.php that can result in Account Tackover. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in v0.3.3...

CVE-2018-1000501

CVE-2018-1000501 affects Instant Update CMS. The vulnerability in /iu-application/controllers/administration/auth.php allows a password-reset-related account takeover and is exploitable via network connectivity. It appears to have been fixed in v0.3.3.

PT-2018-9399

Name of the Vulnerable Software and Affected Versions Instant Update CMS versions prior to 0.3.3 Description The issue is related to a password reset vulnerability in the /iu-application/controllers/administration/auth.php file, which can lead to account takeover. This can be exploited via networ...

CVE-2018-1000501: Weak Password Recovery Mechanism for Forgotten Password

Instant Update CMS contains a Password Reset Vulnerability vulnerability in /iu-application/controllers/administration/auth.php that can result in Account Tackover. This attack appear to be exploitable via network connectivity. This vulnerability appears to have been fixed in v0.3.3...