Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Gestsup Subscribe
Filtered by product Gestsup
Total 1 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-31646 1 Gestsup 1 Gestsup 2021-05-03 7.5 HIGH 9.8 CRITICAL
Gestsup before 3.2.10 allows account takeover through the password recovery functionality (remote). The affected component is the file forgot_pwd.php - it uses a weak algorithm for the generation of password recovery tokens (the PHP uniqueid function), allowing a brute force attack.