Ministry of Commerce, Manufacturing, Business Development, Cooperatives and Consumer Affairs
[more]Security Test Page 7F3A
Published: 2026-10-29
Author: QA Reset
Author: QA Reset
Authorized Security Test
Marker: HACKERAI-7F3A
This page was published through the administrative console of www.commerce.gov.lc during an authorized penetration test. It demonstrates that an unauthenticated party can obtain administrative access and publish arbitrary HTML on this site.
| Step | Weakness |
|---|---|
| 1 | Unauthenticated user creation at /admin/users/add |
| 2 | Password-reset ticket echoed in the debug notice at /users/resetpassword |
| 3 | Ticket redeemed at /users/useticket, password set, admin session obtained |
| 4 | Arbitrary HTML published (this page) |
No malicious content was stored; this page can be deleted from the admin console.
Recent Downloads
