• info
• discussion
• exploit
• solution
• references

Nuke ET User Account Deletion Input Validation Vulnerability

Nuke ET is prone to an input-validation vulnerability because it fails to verify user-supplied data before performing certain actions.

An attacker can exploit this issue to delete arbitrary user accounts from the application.

Nuke ET 3.4 and prior versions are vulnerable.