self-service-password

LDAP Tool Box Self Service Password 소개 Self Service Password는 사용자가 LDAP 디렉터리에서 자신의 비밀번호를 변경할 수 있게 해주는 PHP 애플리케이션입니다. 이 애플리케이션은 표준 LDAPv3 디렉터리OpenLDAP, OpenDS, ApacheDS, Sun Oracle DSEE, Novell 등 및 Active Directory에서도 사용할 수 있습니다. 다음과 같은 기능이 있습니다: Samba 비밀번호 변경을 위한 Samba 모드 Active Directory 모드 비밀번호...

EUVD-2026-90662

Ghost versions before 6.62.0 contain an authentication bypass vulnerability that allows suspended staff users to reactivate their accounts through self-service password reset. Attackers with suspended staff credentials can perform password reset operations to regain active account access and...

CVE-2026-103268: Missing Authorization

Ghost versions before 6.62.0 contain an authentication bypass vulnerability that allows suspended staff users to reactivate their accounts through self-service password reset. Attackers with suspended staff credentials can perform password reset operations to regain active account access and...

CVE-2023-49032

An issue in LTB Self Service Password before v.1.5.4 allows a remote attacker to execute arbitrary code and obtain sensitive information via hijack of the SMS verification code function to arbitrary phone...

CVE-2018-12421

LTB aka LDAP Tool Box Self Service Password before 1.3 allows a change to a user password without knowing the old password via a crafted POST request, because the ldapbind return value is mishandled and the PHP data type is not constrained to be a string...

CVE-2019-11652

A potential authorization bypass issue was found in Micro Focus Self Service Password Reset SSPR versions prior to: 4.4.0.3, 4.3.0.6, and 4.2.0.6. Upgrade to Micro Focus Self Service Password Reset SSPR SSPR versions 4.4.0.3, 4.3.0.6, or 4.2.0.6 as appropriate...

CVE-2023-53958

LDAP Tool Box Self Service Password 1.5.2 contains a password reset vulnerability that allows attackers to manipulate HTTP Host headers during token generation. Attackers can craft malicious password reset requests that generate tokens sent to a controlled server, enabling potential account...

EUVD-2025-204597

LDAP Tool Box Self Service Password 1.5.2 contains a password reset vulnerability that allows attackers to manipulate HTTP Host headers during token generation. Attackers can craft malicious password reset requests that generate tokens sent to a controlled server, enabling potential account...

CVE-2023-53958 LDAP Tool Box Self Service Password 1.5.2 Account Takeover via HTTP Host Header

LDAP Tool Box Self Service Password 1.5.2 contains a password reset vulnerability that allows attackers to manipulate HTTP Host headers during token generation. Attackers can craft malicious password reset requests that generate tokens sent to a controlled server, enabling potential account...

CVE-2023-53958

LDAP Tool Box Self Service Password 1.5.2 is affected by a vulnerability in its password reset flow: attackers can manipulate the HTTP Host header during token generation, causing tokens to be sent to a attacker-controlled server and enabling potential account takeover by using stolen reset token...

CVE-2023-53958 LDAP Tool Box Self Service Password 1.5.2 Account Takeover via HTTP Host Header

LDAP Tool Box Self Service Password 1.5.2 contains a password reset vulnerability that allows attackers to manipulate HTTP Host headers during token generation. Attackers can craft malicious password reset requests that generate tokens sent to a controlled server, enabling potential account...

CVE-2023-53958: Weak Password Recovery Mechanism for Forgotten Password

LDAP Tool Box Self Service Password 1.5.2 contains a password reset vulnerability that allows attackers to manipulate HTTP Host headers during token generation. Attackers can craft malicious password reset requests that generate tokens sent to a controlled server, enabling potential account...

PT-2025-52528

Name of the Vulnerable Software and Affected Versions LDAP Tool Box Self Service Password version 1.5.2 Description The software contains a password reset issue where attackers can manipulate HTTP Host headers during token generation. This allows crafting malicious password reset requests that...

EUVD-2010-4474

Malware in sbrugna...

EUVD-2019-3317

Malware in sbrugna...

EUVD-2019-3322

Malware in sbrugna...

EUVD-2020-18470

Malware in sbrugna...

EUVD-2020-4190

Malware in sbrugna...

EUVD-2023-53056

Malicious code in bioql PyPI...

CVE-2025-5808: Improper Validation of Specified Quantity in Input

Improper Input Validation vulnerability in OpenText Self Service Password Reset allows Authentication Bypass.This issue affects Self Service Password Reset from before 4.8 patch 3...