The Basic Principles Of MySQL database health check
a number header injection vulnerability exists from the forgot password functionality of ArrowCMS version 1.0.0. By sending a specifically crafted host header in the forgot password request, it is possible to send password reset one-way links to users which, as soon as clicked, bring on an attacker-managed server and so leak the password reset toke