CVE-2010-5318
SweetRice CMS < 0.6.7.1 - Unauthenticated Password Reset via Email Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2010-5318. PoCs published by High-Tech Bridge SA.
AI-analyzed exploit summary The exploit demonstrates a logic error in SweetRice CMS 0.6.7 allowing an attacker to reset the admin password via a crafted POST request. It also includes PoCs for XSS and SQL injection vulnerabilities in the same software.
Description
The password-reset feature in as/index.php in SweetRice CMS before 0.6.7.1 allows remote attackers to modify the administrator's password by specifying the administrator's e-mail address in the email parameter.
Exploits (1)
The exploit demonstrates a logic error in SweetRice CMS 0.6.7 allowing an attacker to reset the admin password via a crafted POST request. It also includes PoCs for XSS and SQL injection vulnerabilities in the same software.