Yep, passwords for administrators can be changed, too.
Read in full here:
This thread was posted by one of our members via one of our news source trackers.
This is such a bad vulnerability, but based on the news, it only affects HTTP, not HTTPS?
1 Like