CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Weak Password Recovery Mechanism for Forgotten Password vulnerability in videowhisper Paid Videochat Turnkey Site ppv-live-webcams allows Password Recovery Exploitation.This issue affects Paid Videochat Turnkey Site: from n/a through <= 7.3.11.
Explanation of Vulnerability in Simple Terms
Paid Videochat Turnkey Site versions 7.3.11 and earlier contain a vulnerability that allows unauthenticated attackers to read sensitive data, modify site content, or disrupt service. The vulnerability requires no user interaction and can be exploited over the network. All installations of affected versions should be updated immediately.
What an attacker can do
Read sensitive data, modify content, or disrupt the site without authentication.
Potential impact on your site
Attackers can access user data, alter site content, or take the site offline without needing a login.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
