Revive Adserver · Report #792895

bypass old password with array in /admin/account-user-email.php

Validstatus

lowseverity

22upvotes

12 Mar 2020disclosed

How it was found

attacker maybe change email or password without enter old password with array param.
version:revive-adserver-5.0.4
os :window

{F712486}

attacker maybe change email or password without enter old password

This report was disclosed publicly on HackerOne and belongs to its author and the program. See the original