CMS that sends forgotten password
I'm trying to document this behavior and was wondering if anyone knows of a CMS or blogging platform or forum software that sends you your password in th开发者_如何转开发e clear when you request it.
No, this would be an indication that this software is vulnerable to CWE-257 or CWE-256. In any case you would be 100% sure that whoever wrote it is an idiot.
精彩评论