Description
The "lost password" functionality in b2evolution before 6.7.9 allows remote attackers to reset arbitrary user passwords via a crafted request.
Unscored
CVE-2016-9479
EUVD-2016-10285GHSA-r7c5-pm6v-r8j9
The "lost password" functionality in b2evolution before 6.7.9 allows remote attackers to reset arbitrary user passwords via a crafted reque…
Published Dec 2, 2016 · Updated Aug 6, 2024 · Assigned by mitre