| Package | Affected versions | Patched versions |
|---|---|---|
| dedecms | = 5.7 |
In DedeCMS 5.7SP2, member/resetpassword.php allows remote authenticated users to reset the passwords of arbitrary users via a modified id parameter, because the key parameter is not properly validated.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free