CVE-2018-7935

CVE-2018-7935 POC पहले मान्य Session प्राप्त करें curl http://192.168.8.1/html/index.html | grep SessionID निर्देश: exploit.py को संपादित करें, प्राप्त SessionID डालें भेद्यता स्थिति : पावती प्राप्त हुई और पैच जारी कर दिया गया है...

Vulnerability in all versions of DCForum from dcscripts.com

When a user requests a new password for his account, a new password is generated and sent to the requester anyone that knows the username+email information, which is usually available in "user profile". The problem is that the password is simply the first 6 characters of the user's SessionID, whi...