PHPValley Micro Jobs Site Script 1.01 Account Takeover

PHPValley Micro Jobs Site Script version 1.01 allows for a logged in user to spoof another user and take over their account. Author: Jason Whelan PacketStorm: exploitdev Email: email protected Target Software: PHPValley Micro Jobs Site Script 1.01 Vendor URL: http://phpvalley.com/ Demo:...

PHPValley Micro Jobs Site Script 1.01 Account Takeover

Author: Jason Whelan PacketStorm: exploitdev Email: [email protected] Target Software: PHPValley Micro Jobs Site Script 1.01 Vendor URL: http://phpvalley.com/ Demo: http://phpvalley.com/demo Account Takeover Vulnerability This vulnerability allows users to edit their username, which the scrip...