Lucene search
Veracode Vulnerability DatabaseVERACODE:36312HistoryJul 11, 2022 - 5:07 a.m.
Privilege Escalation
2022-07-1105:07:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.003 Low
EPSS
Percentile
70.6%
idno/known is vulnerable to Privilege Escalation. The vulnerability exists due to the lack of validation in the password reset token in the getContent function of Reset.php, allowing an attacker to account takeover through the password reset poisoning by providing a malicious HTTP header.
| CPE | Name | Operator | Version |
|---|---|---|---|
| idno/known | le | 1.2.2 | |
| idno/known | le | 1.2.2 |
References
blog.jitendrapatro.me/multiple-vulnerabilities-in-idno-known-php-cms-software/
github.com/advisories/GHSA-p757-4v3p-j74f
github.com/idno/known
github.com/swisskyrepo/PayloadsAllTheThings/tree/master/Account%20Takeover#account-takeover-through-password-reset-poisoning
www.pethuraj.com/blog/how-i-earned-800-for-host-header-injection-vulnerability/
Related
cvelist
cvelist
CVE-2022-33011
2022-07-08 11:10:47
cve
cve
CVE-2022-33011
2022-07-08 12:15:10
prion
prion
Design/Logic Flaw
2022-07-08 12:15:00
osv
osv
nvd
nvd
CVE-2022-33011
2022-07-08 12:15:10
github
github