← voltar
CVE-2017-5594

CVE-2017-5594

EPSS 7.0%
An issue was discovered in Pagekit CMS before 1.0.11. In this vulnerability the remote attacker is able to reset the registered user's password, when the debug toolbar is enabled. The password is successfully recovered using this exploit. The SecureLayer7 ID is SL7_PGKT_01.
Produtos afetados
n/a · n/a
PoCs públicas encontradas — 2
cve_referencewww.exploit-db.com/exploits/41143/não verificadoexploitdbwww.exploit-db.com/exploits/41143não verificado
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →
Referências
https://github.com/pagekit/pagekit/commit/e0454f9c037c427a5ff76a57e78dbf8cc00c268bhttps://securelayer7.net/download/pdf/SecureLayer7-Pentest-report-Pagekit-CMS.pdfhttps://securelayer7.net/download/poc/password-reset-vulnerability-exploit-ruby-pagekit-cms.rb.txthttps://www.exploit-db.com/exploits/41143/http://www.securityfocus.com/bid/95806