7 matches found
CVE-2024-42915
A host header injection vulnerability in Staff Appraisal System v1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This will allow attackers to arbitrarily reset other users' passwords and compromise their accounts...
CVE-2024-42915
A host header injection vulnerability in Staff Appraisal System v1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This will allow attackers to arbitrarily reset other users' passwords and compromise their accounts...
CVE-2024-42915
A host header injection vulnerability in Staff Appraisal System v1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This will allow attackers to arbitrarily reset other users' passwords and compromise their accounts...
CVE-2024-42915
The Staff Appraisal System v1.0 is susceptible to a host header injection vulnerability. This flaw allows an attacker to intercept a password reset token by tricking a user into interacting with a crafted password reset link. Successful exploitation enables the attacker to arbitrarily reset other...
Staff Appraisal System 安全漏洞
Staff Appraisal System is an employee appraisal system by Debashish Choudhury, an individual developer. A security vulnerability exists in Staff Appraisal System v1.0, which stems from a host header injection vulnerability that can be exploited by an attacker to obtain a password reset token...
CVE-2024-42915: Weak Password Recovery Mechanism for Forgotten Password
A host header injection vulnerability in Staff Appraisal System v1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This will allow attackers to arbitrarily reset other users' passwords and compromise their accounts...
CVE-2024-42915
A host header injection vulnerability in Staff Appraisal System v1.0 allows attackers to obtain the password reset token via user interaction with a crafted password reset link. This will allow attackers to arbitrarily reset other users' passwords and compromise their accounts...