Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jjj9-qcp9-535g

Опубликовано: 01 мая 2022
Источник: github
Github: Не прошло ревью

Описание

member.php in MyBB (aka MyBulletinBoard), when debug mode is available, allows remote authenticated users to change the password of any account by providing the account's registered e-mail address in a debug request for a do_lostpw action, which prints the change password verification code in the debug output.

member.php in MyBB (aka MyBulletinBoard), when debug mode is available, allows remote authenticated users to change the password of any account by providing the account's registered e-mail address in a debug request for a do_lostpw action, which prints the change password verification code in the debug output.

EPSS

Процентиль: 71%
0.00679
Низкий

Связанные уязвимости

nvd
почти 19 лет назад

member.php in MyBB (aka MyBulletinBoard), when debug mode is available, allows remote authenticated users to change the password of any account by providing the account's registered e-mail address in a debug request for a do_lostpw action, which prints the change password verification code in the debug output.

EPSS

Процентиль: 71%
0.00679
Низкий