FishNet Security Blog From Low to p0wn (Part 3 of 3)

In the final installment, we will again be looking at an instance of vulnerability stacking, this time, however, we'll be focused on account management. I have seen the set of issues I will discuss in this post all reported as low severity. I have also seen instances where the severity has been increased due to the ability to combine the vulnerabilities associated with an application to perform a more advanced attack. [...]