← volver
CVE-2017-5594

CVE-2017-5594

EPSS 7.0%
An issue was discovered in Pagekit CMS before 1.0.11. In this vulnerability the remote attacker is able to reset the registered user's password, when the debug toolbar is enabled. The password is successfully recovered using this exploit. The SecureLayer7 ID is SL7_PGKT_01.
Productos afectados
n/a · n/a
PoCs públicas encontradas — 2
cve_referencewww.exploit-db.com/exploits/41143/no verificadoexploitdbwww.exploit-db.com/exploits/41143no verificado
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →
Referencias
https://github.com/pagekit/pagekit/commit/e0454f9c037c427a5ff76a57e78dbf8cc00c268bhttps://securelayer7.net/download/pdf/SecureLayer7-Pentest-report-Pagekit-CMS.pdfhttps://securelayer7.net/download/poc/password-reset-vulnerability-exploit-ruby-pagekit-cms.rb.txthttps://www.exploit-db.com/exploits/41143/http://www.securityfocus.com/bid/95806