Lucene search
Sk4rl1ghtF4711D7F-1368-48AB-9BEF-45F32E356C47HistoryOct 20, 2022 - 10:27 a.m.
Weak Password Requirement
2022-10-2010:27:35
sk4rl1ght
www.huntr.dev
10
weak password requirement
change function
one-character
bug bounty
EPSS
0.002
Percentile
57.1%
Description
We can change password with just 1 character when we use change password function.
Proof of Concept
When you change password, just press an charactor and then submit. Your password has been changed.
Related
osv
osv
CVE-2022-3754
2022-10-29 13:15:09
phpMyFAQ contains Weak Password Requirements
2022-10-29 19:00:27
prion
prion
Default credentials
2022-10-29 13:15:00
cvelist
cvelist
CVE-2022-3754 Weak Password Requirements in thorsten/phpmyfaq
2022-10-29 00:00:00
github
github
phpMyFAQ contains Weak Password Requirements
2022-10-29 19:00:27
veracode
veracode
Authentication Bypass
2022-11-01 05:49:14
nvd
nvd
CVE-2022-3754
2022-10-29 13:15:09
cve
cve
CVE-2022-3754
2022-10-29 13:15:09
openvas
openvas
phpMyFAQ < 3.1.8 Multiple Vulnerabilities
2022-11-03 00:00:00