CVE-2018-7935

CVE-2018-7935 POC сначала получите действительную сессию curl http://192.168.8.1/html/index.html | grep SessionID Инструкции: Отредактируйте exploit.py , вставьте полученный SessionID Статус уязвимости : Подтверждение получено и исправление выпущено...

Vulnerability in all versions of DCForum from dcscripts.com

When a user requests a new password for his account, a new password is generated and sent to the requester anyone that knows the username+email information, which is usually available in "user profile". The problem is that the password is simply the first 6 characters of the user's SessionID, whi...