Lucene search
+L

444 matches found

RedhatCVE
RedhatCVE
added 2025/09/10 12:34 a.m.8 views

CVE-2025-51586

An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature...

3.7CVSS7AI score0.00816EPSS
SaveExploits1References1
NVD
NVD
added 2025/09/08 5:15 p.m.13 views

CVE-2025-51586

An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature...

3.7CVSS0.00816EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2025/09/08 12:00 a.m.5 views

CVE-2025-51586

An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature...

6.4AI score0.00816EPSS
SaveExploits1References3
OSV
OSV
added 2025/09/08 12:00 a.m.14 views

CVE-2025-51586

An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature...

3.7CVSS7AI score
SaveExploits0References5
CVE
CVE
added 2025/09/08 12:00 a.m.102 views

CVE-2025-51586

Summary (CVE-2025-51586): PrestaShop versions 1.7.x to 8.2.2 contain an information-disclosure weakness in the AdminLogin controller that allows an unauthenticated attacker with access to the Back Office login URL to enumerate administrator emails by manipulating id_employee and reset_token in th...

3.7CVSS6.4AI score0.00816EPSS
SaveExploits1References3Affected Software1
Cvelist
Cvelist
added 2025/09/08 12:00 a.m.20 views

CVE-2025-51586

An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature...

0.00816EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2025/09/05 12:34 a.m.21 views

CVE-2025-57146

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter...

8.1CVSS8.2AI score0.00439EPSS
SaveExploits1References1
CNVD
CNVD
added 2025/09/05 12:00 a.m.7 views

Complaint Management System in PHP reset-password.php file SQL injection vulnerability

Complaint Management System in PHP is a complaint management system. Complaint Management System in PHP suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the mobileno parameter of user/reset-password.php. An attacker can...

8.1CVSS8.3AI score0.00439EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2025/09/04 12:00 a.m.14 views

PT-2025-36483

Name of the Vulnerable Software and Affected Versions: PrestaShop versions prior to 8.2.1 PrestaShop version 8.2.2 PrestaShop version 8.2.3 Description: An issue exists in the controllers/admin/AdminLoginController.php file that allows attackers to gain sensitive information via the password rese...

4.2CVSS6.5AI score0.00816EPSS
SaveExploits1References21
OSV
OSV
added 2025/09/03 3:15 p.m.7 views

CVE-2025-57146

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter...

8.1CVSS5.8AI score0.00439EPSS
SaveExploits1References1
NVD
NVD
added 2025/09/03 3:15 p.m.10 views

CVE-2025-57146

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter...

8.1CVSS0.00439EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2025/09/03 12:00 a.m.10 views

PT-2025-35778

Name of the Vulnerable Software and Affected Versions: phpgurukul Complaint Management System in PHP version 2.0 Description: The phpgurukul Complaint Management System in PHP is susceptible to SQL Injection. The vulnerability is located in the user/reset-password.php file and can be triggered...

8.1CVSS7.1AI score0.00439EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2025/09/03 12:00 a.m.18 views

CVE-2025-57146

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter...

0.00439EPSS
SaveExploits1References2
CNNVD
CNNVD
added 2025/09/03 12:00 a.m.8 views

PHPGurukul Complaint Management System 安全漏洞

Complaint Management System in PHP is a complaint management system. Complaint Management System in PHP suffers from a SQL injection vulnerability that originates from the lack of validation of externally entered SQL statements in the mobileno parameter of user/reset-password.php. An attacker can...

8.1CVSS8.3AI score0.00439EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2025/09/03 12:00 a.m.4 views

CVE-2025-57146

phpgurukul Complaint Management System in PHP 2.0 is vulnerable to SQL Injection in user/reset-password.php via the mobileno parameter...

7.6AI score0.00439EPSS
SaveExploits1References2
CVE
CVE
added 2025/09/03 12:00 a.m.28 views

CVE-2025-57146

CVE-2025-57146 affects the phpgurukul Complaint Management System in PHP 2.0. The vulnerability is a SQL injection in the file/endpoint user/reset-password.php via the mobileno parameter, caused by lack of input validation. This can allow an attacker to manipulate SQL and potentially access sensi...

8.1CVSS7.6AI score0.00439EPSS
SaveExploits1References2Affected Software1
RedhatCVE
RedhatCVE
added 2025/08/21 12:26 a.m.19 views

CVE-2025-51543

An issue was discovered in Cicool builder 3.4.4 allowing attackers to reset the administrator's password via the /administrator/auth/resetpassword endpoint...

9.8CVSS7.3AI score0.00342EPSS
SaveExploits0References1
NVD
NVD
added 2025/08/19 8:15 p.m.13 views

CVE-2025-51543

An issue was discovered in Cicool builder 3.4.4 allowing attackers to reset the administrator's password via the /administrator/auth/resetpassword endpoint...

9.8CVSS0.00342EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2025/08/19 12:00 a.m.10 views

Cicool web builder 安全漏洞

Cicool web builder is a website builder from Cicool Inc. A security vulnerability exists in Cicool web builder version 3.4.4, which originates from allowing an attacker to reset the administrator password via the /administrator/auth/resetpassword endpoint...

9.8CVSS6.9AI score0.00342EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2025/08/19 12:00 a.m.6 views

CVE-2025-51543

An issue was discovered in Cicool builder 3.4.4 allowing attackers to reset the administrator's password via the /administrator/auth/resetpassword endpoint...

7.2AI score0.00342EPSS
SaveExploits0References1
Rows per page
Query Builder