MKCMS 5.0 allows remote attackers to take over arbitrary user accounts by posting a username and e-mail address to ucenter/repass.php, which triggers e-mail transmission with the password, as demonstrated by 123456.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2019-04-18T22:17:14

Updated: 2024-08-04T22:48:09.203Z

Reserved: 2019-04-18T00:00:00

Link: CVE-2019-11332

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2019-04-18T23:29:00.377

Modified: 2024-11-21T04:20:54.193

Link: CVE-2019-11332

cve-icon Redhat

No data.