Lucene search
+L

2 matches found

seebug.org
seebug.org
added 2014/05/12 12:0 a.m.30 views

PHPYUN设计缺陷可批量重置全部用户密码

简要描述: 不过重置成了什么我也不知道。 但如果有一天,一个网站所有用户密码全部被重置成随机字符了,所有遗失邮箱的用户就完全丢失自己的账号了。就算没有遗失邮箱,但莫名其妙地被重置密码了,谁会开心? 详细说明: 0x01. 访问链接friend/index.php?C=profile&id=1可以查看uid=1的用户的信息,其中就有用户名。 因为uid是数字,所以存在遍历的可能,我可以写一个脚本,把数据库中所有用户用户名遍历出来。 0x02...

7AI score
SaveExploits0
Atlassian
Atlassian
added 2011/02/15 12:5 p.m.25 views

Ability to perform a bulk random password reset for users per project

Would like to have the ability to perform a bulk password reset on user accounts for any particular JIRA project. Have recently received a request from a customer to perform this operation on their project. I did raise a support call JSP-73240 and was recommended to raise a New Feature Request...

2.4AI score
SaveExploits0Affected Software1
Rows per page
Query Builder