💣Exploit CVE-2024-51478 - YesWiki Weak Password Reset Key Disclosure

[Maksim]

CVE ID : CVE-2024-51478
Published : Oct. 31, 2024, 5:15 p.m. | 3 hours, 5 minutes ago
Description : YesWiki is a wiki system written in PHP. Prior to 4.4.5, the use of a weak cryptographic algorithm and a hard-coded salt to hash the password reset key allows it to be recovered and used to reset the password of any account. This issue is fixed in 4.4.5.
Severity: 9.9 | CRITICAL
Visit the link for more details, such as CVSS details, affected products, timeline, and more...
Full story here:

To view the content, you need to Sign In or Register.