daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Enhancement: cves/2017/CVE-2017-7615.yaml by mp

patch-1
MostInterestingBotInTheWorld 2022-06-19 11:23:34 -04:00
parent 826d3d32c1
commit 5648fe06ce
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
cves/2017/CVE-2017-7615.yaml
View File

@ -6,7 +6,7 @@ id: CVE-2017-7615
# MantisBT before 1.3.10, 2.2.4, and 2.3.1, that can be downloaded on reference[1]. # MantisBT before 1.3.10, 2.2.4, and 2.3.1, that can be downloaded on reference[1].
info: info:
name: MantisBT <=2.30 - Arbitrary Password Reset and Unauthenticated Admin Access name: MantisBT <=2.30 - Arbitrary Password Reset/Admin Access
author: bp0lr,dwisiswant0 author: bp0lr,dwisiswant0
severity: high severity: high
description: MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php. description: MantisBT through 2.3.0 allows arbitrary password reset and unauthenticated admin access via an empty confirm_hash value to verify.php.
@ -15,6 +15,7 @@ info:
- http://hyp3rlinx.altervista.org/advisories/MANTIS-BUG-TRACKER-PRE-AUTH-REMOTE-PASSWORD-RESET.txt - http://hyp3rlinx.altervista.org/advisories/MANTIS-BUG-TRACKER-PRE-AUTH-REMOTE-PASSWORD-RESET.txt
- https://www.exploit-db.com/exploits/41890 - https://www.exploit-db.com/exploits/41890
- http://www.openwall.com/lists/oss-security/2017/04/16/2 - http://www.openwall.com/lists/oss-security/2017/04/16/2
- https://nvd.nist.gov/vuln/detail/CVE-2017-7615
classification: classification:
cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H cvss-metrics: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
cvss-score: 8.8 cvss-score: 8.8
@ -42,3 +43,5 @@ requests:
- type: status - type: status
status: status:
- 200 - 200
# Enhanced by mp on 2022/06/19