CVE-2018-1000158

cmsmadesimple version 2.2.7 contains a Incorrect Access Control vulnerability in the function of sendrecoveryemail in the line "$url = $config'adminurl' . '/login.php?recoverme=' . $code;" that can result in Administrator Password Reset Poisoning, specifically a reset URL pointing at an attacker...

Improper access control

cmsmadesimple version 2.2.7 contains a Incorrect Access Control vulnerability in the function of sendrecoveryemail in the line "$url = $config'adminurl' . '/login.php?recoverme=' . $code;" that can result in Administrator Password Reset Poisoning, specifically a reset URL pointing at an attacker...

CVE-2018-1000158

CMS Made Simple 2.2.7 has an Incorrect Access Control vulnerability in send_recovery_email that can create a reset URL pointing to an attacker-controlled server via a host header attack, enabling Administrator Password Reset Poisoning. Affected: cmsmadesimple 2.2.7. No explicit mitigations or pat...

CVE-2018-1000158

cmsmadesimple version 2.2.7 contains a Incorrect Access Control vulnerability in the function of sendrecoveryemail in the line "$url = $config'adminurl' . '/login.php?recoverme=' . $code;" that can result in Administrator Password Reset Poisoning, specifically a reset URL pointing at an attacker...

Passit: Session not changed after password reset

Hey, I've found a session management in app.passit.io, which can lead to session takeover! Issue: ============== When the password of an account is changed from a session, other sessions doesn't expire! Steps To Reproduce: ====================== 1 we need to use two different browsers ex:- 1...

CVE-2018-10081

CMS Made Simple CMSMS through 2.2.6 contains an admin password reset vulnerability because data values are improperly compared, as demonstrated by a hash beginning with the "0e" substring...

Design/Logic Flaw

CMS Made Simple CMSMS through 2.2.6 contains an admin password reset vulnerability because data values are improperly compared, as demonstrated by a hash beginning with the "0e" substring...

CVE-2018-10081

CMS Made Simple (CMSMS) up to version 2.2.6 contains an admin password reset vulnerability caused by improper comparison of data values, illustrated by a hash starting with the "0e" substring. The vulnerability enables unauthorized password resets. Affected product/version: CMSMS ≤ 2.2.6. Root ca...

CVE-2018-10081

CMS Made Simple CMSMS through 2.2.6 contains an admin password reset vulnerability because data values are improperly compared, as demonstrated by a hash beginning with the "0e" substring...

CMS Made Simple Administrator Password Reset Vulnerability

CMS Made Simple CMSMS is an open source content management system CMS developed by the CMSMS team. The system supports role-based rights management system , wizard-based installation and update mechanism , intelligent caching mechanism and so on. A security vulnerability exists in CMSMS 2.2.6 and...

CMS Made Simple suffers from an administrator password reset vulnerability

CMS Made Simple is a simple, easy-to-use content management system developed using PHP, MySQL and Smarty template engines. An administrator password reset vulnerability exists in CMS Made Simple. An attacker can use this vulnerability to reset the administrator password and gain administrator log...

Wukong CRM version 0.5.5 suffers from password reset vulnerability

Wukong CRM is a permanent open source and free CRM management system. A password reset vulnerability exists in Wukong CRM version 0.5.5. An attacker can exploit this vulnerability to gain unauthorized access to user information and reset any user's password...

BOHEMIA INTERACTIVE a.s.: (Possible) staff account takeover via reset token bruteforce at helpdesk.bistudio.com

As stated in a brief exchange with @rvn in my other report 312433, I might have found a logic flaw in the way https://helpdesk.bistudio.com handles the reset flow and tokens. I've asked if it was possible to obtain a test account, but I fully understand that it's something that cannot be done; as...

Arbitrary User Password Reset Vulnerability in Tianrongxin Vulnerability Scanning and Management System v3.3.0

TopScanner is a vulnerability scanning and management evaluation product that includes application detection, vulnerability scanning, vulnerability identification, risk analysis, and comprehensive assessment based on years of experience in network security product research and development by...

Enhancesoft osTicket Arbitrary Password Reset Vulnerability

Enhancesoft osTicket is a U.S. Enhancesoft's open source ticketing system. A security vulnerability exists in Enhancesoft osTicket versions prior to 1.10.2. A remote attacker can exploit the vulnerability to reset arbitrary passwords...

CVE-2018-7195

Enhancesoft osTicket before 1.10.2 allows remote attackers to reset arbitrary passwords when an associated e-mail address is known by leveraging guest access and guessing a 6-digit number...

Code injection

Enhancesoft osTicket before 1.10.2 allows remote attackers to reset arbitrary passwords when an associated e-mail address is known by leveraging guest access and guessing a 6-digit number...

CVE-2018-7195

CVE-2018-7195 concerns Enhancesoft osTicket before 1.10.2. The issue allows a remote attacker to reset arbitrary passwords (when an associated e‑mail address is known) by exploiting guest access and guessing a 6‑digit number. Public sources in the connected documents consistently describe this as...

CVE-2018-7195

Enhancesoft osTicket before 1.10.2 allows remote attackers to reset arbitrary passwords when an associated e-mail address is known by leveraging guest access and guessing a 6-digit number...

Arbitrary User Password Reset and Reflective Cross-site Scripting Vulnerabilities in zzcms System

Webmaster Merchants Content Management System ZZCMS developed by the ZZCMS team, into the database optimization, content caching, AJAX and other technologies, open source, independent functional modules, to facilitate secondary development. zzcms system exists arbitrary user password reset and...