9813 matches found
CVE-2013-7305
fpw.php in e107 through 1.0.4 does not check the userban field, which makes it easier for remote attackers to reset passwords by sending a pwsubmit request and leveraging access to the e-mail account of a banned user...
Cross site request forgery (csrf)
fpw.php in e107 through 1.0.4 does not check the userban field, which makes it easier for remote attackers to reset passwords by sending a pwsubmit request and leveraging access to the e-mail account of a banned user...
CVE-2013-7305
CVE-2013-7305 affects the e107 CMS (versions up to 1.0.4). The vulnerability lies in fpw.php, which does not check the user_ban field, enabling remote attackers to reset passwords by sending a pwsubmit request and using access to the banned user’s email account. Multiple sources (Red Hat entry an...
CVE-2013-7305
fpw.php in e107 through 1.0.4 does not check the userban field, which makes it easier for remote attackers to reset passwords by sending a pwsubmit request and leveraging access to the e-mail account of a banned user...
金蝶云之家博客任意用户密码重置
简要描述： 详细说明： 地址： http://kdweibo.com/home 依次点击： 登陆--忘记登陆密码 然后登陆邮箱查看重置链接是否存在缺陷 上图中可看到，请求链接存在u和t的参数： 尝试数次后可观察到，u是固定不变的，大概是userName相关的串，而t是有规律的递增。 紧接着尝试重置密码的操作，发现u这个参数是无用的，post请求只发送一个t参数和表单中的新密码，如下图： 好了，现在我们开始研究这个t参数。在找回密码的第一个页面，连续数次提交我的邮箱地址，获取到5个重置密码的链接，把他们列在下面观察一下： 可以看出，t参数只有5-8位...
CVE-2013-7305: Undefined Security Weakness
fpw.php in e107 through 1.0.4 does not check the userban field, which makes it easier for remote attackers to reset passwords by sending a pwsubmit request and leveraging access to the e-mail account of a banned user...
PT-2014-3348
Name of the Vulnerable Software and Affected Versions e107 versions through 1.0.4 Description The issue concerns the lack of validation for the user ban field in the fpw.php file. This oversight allows remote attackers to reset passwords by sending a 'pwsubmit' request, provided they have access ...
BLUE COM Router 5360/52018密码重置漏洞
No description provided by source. Exploit Title: BLUE COM Router - 5360/52018 Password Reset Exploit Date: 20/1/2013 Exploit Author: KAI kaisai12 Home: CEH.VN Version: BCOM - 5360 vulnerability - change password easy ! no protect ! var loc = 'password.cgi?'; switch idx case 2: loc +=...
BLUE COM Router 536052018 - Password Reset
BLUE COM Router 536052018 - Password Reset Exploit Title: BLUE COM Router - 5360/52018 Password Reset Exploit Date: 20/1/2013 Exploit Author: KAI kaisai12 Home: CEH.VN Version: BCOM - 5360 vulnerability - change password easy ! no protect ! var loc = 'password.cgi?'; switch idx case 2: loc +=...
BlueCom 5360/52018 Password Reset
Exploit Title: BLUE COM Router - 5360/52018 Password Reset Exploit Date: 20/1/2013 Exploit Author: KAI kaisai12 Home: CEH.VN Version: BCOM - 5360 vulnerability - change password easy ! no protect ! var loc = 'password.cgi?'; switch idx case 2: loc += 'sptPassword=' + encodeUrlpwdNew.value; break;...
BLUE COM Router 5360/52018 - Password Reset
Exploit Title: BLUE COM Router - 5360/52018 Password Reset Exploit Date: 20/1/2013 Exploit Author: KAI kaisai12 Home: CEH.VN Version: BCOM - 5360 vulnerability - change password easy ! no protect ! var loc = 'password.cgi?'; switch idx case 2: loc += 'sptPassword=' + encodeUrlpwdNew.value; break;...
HackerOne: A password reset page does not properly validate the authenticity token at the server side.
Go to https://hackerone.com/users/password/new and request a new password. 2. go to email, and click on the link. 3. put the new password, submit and intercept the request; remove the authenticity token from the request and now forward it to the server. 4. you will see request still got...
HackerOne: Information disclosure (reset password token) and changing the user's password
The user gets an e-mail with password recovery link, which includes reset password token. The user clicks this link and is expected to enter a new password twice. Before entering the password the user clicks a link to a picture https://xkcd.com/936/. When this happens, cross-domain referer leakag...
Threat Outbreak Alert: Fake Password Reset Form Attachment Email Messages on January 15, 2014
Medium Alert ID: 32443 First Published: 2014 January 15 22:15 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a password reset form for the recipient. The text in the email message attempts to convince the recipient to...
CVE-2014-1206
SQL injection vulnerability in the password reset page in Open Web Analytics OWA before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the owaemailaddress parameter in a base.passwordResetRequest action to index.php...
Sql injection
SQL injection vulnerability in the password reset page in Open Web Analytics OWA before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the owaemailaddress parameter in a base.passwordResetRequest action to index.php...
CVE-2014-1206
SQL injection vulnerability in the password reset page in Open Web Analytics OWA before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the owaemailaddress parameter in a base.passwordResetRequest action to index.php...
CVE-2014-1206
SQL injection vulnerability in the password reset page in Open Web Analytics OWA before 1.5.5 allows remote attackers to execute arbitrary SQL commands via the owaemailaddress parameter in a base.passwordResetRequest action to index.php...
