PAD CMS Password Recovery Vulnerability Allowing Unauthorized Password Changes
Vulnerability
A vulnerability in PAD CMS has been identified, allowing unauthorized users to change passwords for any user who has not previously used the password reset function. This issue arises from improper initialization of the parameter used for password recovery. The vulnerability affects all three templates: www, bip, and www+bip.
Impact
Exploitation of this vulnerability allows for unauthorized password changes, potentially leading to unauthorized access to user accounts.
Added: Sep 30, 2025, 11:58 AM
Updated: Sep 30, 2025, 11:58 AM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
1.3exploitability
7.4remediation
0.0relevance
0.6threat
0.0urgency
2.9incentive
5.8Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.