444 matches found
CVE-2025-51586
An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature...
CVE-2025-51586
An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature...
CVE-2025-51586
An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature...
CVE-2025-51586
An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature...
CVE-2025-51586
Summary (CVE-2025-51586): PrestaShop versions 1.7.x to 8.2.2 contain an information-disclosure weakness in the AdminLogin controller that allows an unauthenticated attacker with access to the Back Office login URL to enumerate administrator emails by manipulating id_employee and reset_token in th...
CVE-2025-51586
An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature...
CVE-2025-57146
phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter...
Complaint Management System in PHP reset-password.php file SQL injection vulnerability
Complaint Management System in PHP is a complaint management system. Complaint Management System in PHP suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the mobileno parameter of user/reset-password.php. An attacker can...
PT-2025-36483
Name of the Vulnerable Software and Affected Versions: PrestaShop versions prior to 8.2.1 PrestaShop version 8.2.2 PrestaShop version 8.2.3 Description: An issue exists in the controllers/admin/AdminLoginController.php file that allows attackers to gain sensitive information via the password rese...
CVE-2025-57146
phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter...
CVE-2025-57146
phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter...
PT-2025-35778
Name of the Vulnerable Software and Affected Versions: phpgurukul Complaint Management System in PHP version 2.0 Description: The phpgurukul Complaint Management System in PHP is susceptible to SQL Injection. The vulnerability is located in the user/reset-password.php file and can be triggered...
CVE-2025-57146
phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter...
PHPGurukul Complaint Management System 安全漏洞
Complaint Management System in PHP is a complaint management system. Complaint Management System in PHP suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the mobileno parameter of user/reset-password.php. An attacker can...
CVE-2025-57146
phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter...
CVE-2025-57146
CVE-2025-57146 affects the phpgurukul Complaint Management System in PHP 2.0. The vulnerability is a SQL injection in the file/endpoint user/reset-password.php via the mobileno parameter, caused by lack of input validation. This can allow an attacker to manipulate SQL and potentially access sensi...
CVE-2025-51543
An issue was discovered in Cicool builder 3.4.4 allowing attackers to reset the administrator's password via the /administrator/auth/resetpassword endpoint...
CVE-2025-51543
An issue was discovered in Cicool builder 3.4.4 allowing attackers to reset the administrator's password via the /administrator/auth/resetpassword endpoint...
Cicool web builder 安全漏洞
Cicool web builder is a website builder from Cicool Inc. A security vulnerability exists in Cicool web builder version 3.4.4, which originates from allowing an attacker to reset the administrator password via the /administrator/auth/resetpassword endpoint...