3 matches found
CVE-2022-27157
pearweb 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php...
9.8CVSS0.012EPSS
SaveExploits0References3
CVE-2022-27157: Weak Password Recovery Mechanism for Forgotten Password
pearweb 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php...
9.8CVSS8.2AI score0.012EPSS
SaveExploits0References2
PT-2022-18255
Name of the Vulnerable Software and Affected Versions pearweb versions prior to 1.32 Description The issue is related to a weak password recovery mechanism. It is specifically exploitable via the include/users/passwordmanage.php endpoint. Recommendations For versions prior to 1.32, update to...
9.8CVSS5.8AI score0.012EPSS
SaveExploits0References4
20