CVE-2024-24570 Statamic account takeover via XSS and password reset link

Statamic is a Laravel and Git powered CMS. HTML files crafted to look like jpg files are able to be uploaded, allowing for XSS. This affects the front-end forms with asset fields without any mime type validation, asset fields in the control panel, and asset browser in the control panel...

PT-2024-20460 · Statamic · Statamic

Name of the Vulnerable Software and Affected Versions: Statamic versions prior to 3.4.17 Statamic versions prior to 4.46.0 Description: The issue allows HTML files crafted to look like jpg files to be uploaded, enabling cross-site scripting XSS attacks. This affects front-end forms with asset...

The vulnerability of the Energy Communication Unit (ECU-C) software, related to deficiencies in access control to the password reset code, allows a intruder to execute arbitrary codes.

The vulnerability of the Energy Communication Unit ECU-C control software is related to deficiencies in access control for password reset code. Exploiting this vulnerability allows a remote attacker to execute arbitrary codes...

CVE-2024-22646

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system...

Design/Logic Flaw

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system...

PT-2024-19518 · Seo Panel · Seo Panel

Name of the Vulnerable Software and Affected Versions: SEO Panel version 4.10.0 Description: A Cross-Site Request Forgery CSRF issue allows remote attackers to perform unauthorized user password resets. Recommendations: For SEO Panel version 4.10.0, update to a version that fixes this issue to...

CVE-2024-22643

A Cross-Site Request Forgery CSRF vulnerability in SEO Panel version 4.10.0 allows remote attackers to perform unauthorized user password resets...

SEO Panel Cross-Site Request Forgery Vulnerability

SEO Panel is an open source panel for managing website SEO Search Engine Optimization. A cross-site request forgery vulnerability exists in SEO Panel version 4.10.0, which originates from a vulnerability that allows a remote attacker to perform an unauthorized user password reset...

CVE-2024-22646

The provided sources corroborate CVE-2024-22646 affecting SEO Panel version 4.10.0, describing an email address enumeration vulnerability in the password reset function that lets an attacker determine which emails exist on the system. The CVSS data in the NVD entry indicates a Network attack vect...

CVE-2024-22646

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system...

CVE-2024-22646

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system...

SEO Panel Security Breach

SEO Panel is an open source panel for managing website SEO Search Engine Optimization. A security vulnerability exists in SEO Panel version 4.10.0, which stems from an email address enumeration vulnerability in the password reset feature that allows an attacker to guess which emails exist on the...

CVE-2024-22643

A CSRF vulnerability (CVE-2024-22643) affects SEO Panel v4.10.0, enabling remote attackers to perform unauthorized user password resets. Root cause: CSRF allowing state-changing password-reset actions. Documented by Red Hat, OSV, and PT-Security entries; exploitation details are not provided in t...

PT-2024-19519 · Seo Panel · Seo Panel

Name of the Vulnerable Software and Affected Versions: SEO Panel version 4.10.0 Description: An email address enumeration issue exists in the password reset function. This allows an attacker to guess which emails exist on the system. Recommendations: For SEO Panel version 4.10.0, consider disabli...

CVE-2024-22646

An email address enumeration vulnerability exists in the password reset function of SEO Panel version 4.10.0. This allows an attacker to guess which emails exist on the system...

CVE-2024-0880

A vulnerability was found in Qidianbang qdbcrm 1.1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/edit?id=2 of the component Password Reset. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The...

CVE-2024-0880

A vulnerability was found in Qidianbang qdbcrm 1.1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/edit?id=2 of the component Password Reset. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The...

CVE-2024-0880 Qidianbang qdbcrm Password Reset cross-site request forgery

A vulnerability was found in Qidianbang qdbcrm 1.1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/edit?id=2 of the component Password Reset. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The...

CVE-2024-0880 Qidianbang qdbcrm Password Reset cross-site request forgery

A vulnerability was found in Qidianbang qdbcrm 1.1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /user/edit?id=2 of the component Password Reset. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The...

PT-2024-15885 · Qidianbang · Qidianbang Qdbcrm

Name of the Vulnerable Software and Affected Versions: Qidianbang qdbcrm version 1.1.0 Description: A vulnerability was found in the Password Reset component of Qidianbang qdbcrm, affecting some unknown functionality of the file /user/edit?id=2. This issue leads to cross-site request forgery and...