Description
reset-password.php in ProjectSend before r1295 allows remote attackers to reset a password because of incorrect business logic. Errors are not properly considered (an invalid token parameter).
Remediation
References
Related Vulnerabilities
WordPress Plugin SpiderCatalog SQL Injection (1.7.3)
Ampache Other Vulnerability (CVE-2006-5668)
Artifactory Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2021-23163)
WordPress Plugin MailChimp List Subscribe Form Multiple Unspecified Vulnerabilities (1.1)
WordPress Plugin Roomcloud Multiple Cross-Site Scripting Vulnerabilities (1.1)