PT-2024-15885 · Qidianbang · Qidianbang Qdbcrm

Name of the Vulnerable Software and Affected Versions: Qidianbang qdbcrm version 1.1.0 Description: A vulnerability was found in the Password Reset component of Qidianbang qdbcrm, affecting some unknown functionality of the file /user/edit?id=2. This issue leads to cross-site request forgery and...

CVE-2022-22691

The password reset component deployed within Umbraco uses the hostname supplied within the request host header when building a password reset URL. It may be possible to manipulate the URL sent to Umbraco users when so that it points to the attackers server thereby disclosing the password reset...