Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
password.asp in Snitz Forums 3.4.03 and earlier allows remote attackers to reset passwords and gain privileges as other users by via a direct request to password.asp with a modified member id.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Snitz Forums password.asp密码重设漏洞
Vulnerability Description
Snitz Forums是一款基于WEB的ASP脚本编写的论坛程序。 Snitz Forums包含的密码重设功能存在问题,远程攻击者可以利用这个漏洞重设任何帐户密码。 攻击者可以请求password.asp脚本,要求密码重设,然后以离线方式保存重设密码页,更改用户ID,提交表单就可以设置任意用户的密码。
CVSS Information
N/A
Vulnerability Type
N/A