Executive Summary

This vulnerability exists in iteachyou Dreamer CMS up to version 4.1.3.2, specifically in the processing of the /admin/user/updatePwd file. It allows manipulation that results in weak password requirements, potentially enabling attackers to set weak passwords. The vulnerability can be exploited remotely but requires a high degree of complexity and is considered difficult to exploit. The exploit is publicly available.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to weak password enforcement, which may allow attackers to compromise user accounts by setting or exploiting weak passwords. This can result in unauthorized access or privilege escalation within the CMS. However, exploitation is difficult and requires significant effort.

Useful 0 Not Useful 0