Exploitation Summary
EIP tracks 1 public exploit for CVE-2022-50910. PoCs published by Pablo Santiago.
AI-analyzed exploit summary This exploit demonstrates an account takeover vulnerability in Beehive Forum 1.5.2 by manipulating the 'Host' header in the password reset functionality to steal tokens and reset passwords. It requires user interaction and involves setting up a listener to capture the token.
Description
Beehive Forum 1.5.2 contains a host header injection vulnerability in the forgot password functionality that allows attackers to manipulate password reset requests. Attackers can inject a malicious host header to intercept password reset tokens and change victim account passwords without direct authentication.
Exploits (1)
This exploit demonstrates an account takeover vulnerability in Beehive Forum 1.5.2 by manipulating the 'Host' header in the password reset functionality to steal tokens and reset passwords. It requires user interaction and involves setting up a listener to capture the token.
References (5)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H