cvedb.io
CVE-2017-5594
HIGH · CVSS 7.5
EPSS exploitation probability: 0%
Published 2017-01-25T18:59:00.153 · Last modified 2026-06-17T01:20:48.270

Summary

An issue was discovered in Pagekit CMS before 1.0.11. In this vulnerability the remote attacker is able to reset the registered user's password, when the debug toolbar is enabled. The password is successfully recovered using this exploit. The SecureLayer7 ID is SL7_PGKT_01.

Affected products

pagekit — pagekit

Does this affect you?

Add your gear to cvedb and we'll alert you only when pagekit ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.