CVE-2021-31646

Gestsup before 3.2.10 allows account takeover through the password recovery functionality remote. The affected component is the file forgotpwd.php - it uses a weak algorithm for the generation of password recovery tokens the PHP uniqueid function, allowing a brute force attack...

CVE-2021-31646

Vulnerability summary: Gestsup before 3.2.10 has an account-takeover risk via the password-recovery flow. The token in forgot_pwd.php is generated with the PHP uniqueid function, which is weak and susceptible to brute-force attacks, enabling remote exploitation. Affected software: Gestsup up to v...

PT-2021-19460

Name of the Vulnerable Software and Affected Versions Gestsup versions prior to 3.2.10 Description The issue allows for account takeover through the password recovery functionality remotely. It is caused by a weak algorithm used for generating password recovery tokens in the forgot pwd.php file,...

CVE-2021-31646: Improper Restriction of Excessive Authentication Attempts

Gestsup before 3.2.10 allows account takeover through the password recovery functionality remote. The affected component is the file forgotpwd.php - it uses a weak algorithm for the generation of password recovery tokens the PHP uniqueid function, allowing a brute force attack...

Gestsup 安全漏洞

GESTSUP is a software application from the French company GESTSUP. It is 100% web-based SUPport MANAGEMENT software that manages tickets and devices. A security vulnerability exists in versions prior to Gestsup 3.2.10 that allows brute-force breaking attacks...

Getsup 3.1.46 XSS Vulnerability

Exploit for php platform in category web applications Title: Getsup 3.1.46 Version 3.1 patch 46 All vers affected Author: @Eawhitehat - Eren Arslan Vendor: https://gestsup.fr/ Demo available : https://demo.gestsup.fr/ User: admin Password: admin Software Link:...