Логотип exploitDog
bind:CVE-2019-19735
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2019-19735

Количество 2

Количество 2

nvd логотип

CVE-2019-19735

около 6 лет назад

class.userpeer.php in MFScripts YetiShare 3.5.2 through 4.5.3 uses an insecure method of creating password reset hashes (based only on microtime), which allows an attacker to guess the hash and set the password within a few hours by bruteforcing.

CVSS3: 9.1
EPSS: Низкий
github логотип

GHSA-j9pc-f8q5-rxm8

больше 3 лет назад

class.userpeer.php in MFScripts YetiShare 3.5.2 through 4.5.3 uses an insecure method of creating password reset hashes (based only on microtime), which allows an attacker to guess the hash and set the password within a few hours by bruteforcing.

CVSS3: 9.1
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2019-19735

class.userpeer.php in MFScripts YetiShare 3.5.2 through 4.5.3 uses an insecure method of creating password reset hashes (based only on microtime), which allows an attacker to guess the hash and set the password within a few hours by bruteforcing.

CVSS3: 9.1
0%
Низкий
около 6 лет назад
github логотип
GHSA-j9pc-f8q5-rxm8

class.userpeer.php in MFScripts YetiShare 3.5.2 through 4.5.3 uses an insecure method of creating password reset hashes (based only on microtime), which allows an attacker to guess the hash and set the password within a few hours by bruteforcing.

CVSS3: 9.1
0%
Низкий
больше 3 лет назад

Уязвимостей на страницу