Pagekit Weak Password Recovery Mechanism for Forgotten Password

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2017-5594 · ADVISORY
• pagekit/pagekit commit e0454f9 · WEB
• pagekit/pagekit · PACKAGE
• securelayer7.net/download/pdf/SecureLayer7-Pentest-report-Pagekit-CMS.pdf · WEB
• securelayer7.net/download/poc/password-reset-vulnerability-exploit-ruby-pagekit-cms.rb.txt · WEB
• exploit-db.com/exploits/41143 · WEB
• securityfocus.com/bid/95806 · WEB
• exploit-db.com/exploits/41143 · Exploit

pagekit/pagekit のその他の脆弱性

• CVE-2025-67165緊急 9.8An Insecure Direct Object Reference (IDOR) in Pagekit CMS v1.0.18 allows attackers to escalate privileges.
• CVE-2025-67164緊急 9.9An authenticated arbitrary file upload vulnerability in the /storage/poc.php component of Pagekit CMS v1.0.18 allows attackers to execute ar…
• CVE-2024-45967中 4.7Pagekit 1.0.18 is vulnerable to Cross Site Scripting (XSS) in index.php/admin/site/widget.
• CVE-2023-41005高 7.8An issue in Pagekit pagekit v.1.0.18 alows a remote attacker to execute arbitrary code via thedownloadAction and updateAction functions in U…
• CVE-2022-38916緊急 9.8A file upload vulnerability exists in the storage feature of pagekit 1.0.18, which allows an attacker to upload malicious files