Unrated severityNVD Advisory· Published Jan 13, 2026· Updated Mar 5, 2026
Beehive Forum - Account Takeover
CVE-2022-50910
Description
Beehive Forum 1.5.2 contains a host header injection vulnerability in the forgot password functionality that allows attackers to manipulate password reset requests. Attackers can inject a malicious host header to intercept password reset tokens and change victim account passwords without direct authentication.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2=1.5.2+ 1 more
- (no CPE)range: =1.5.2
- (no CPE)range: 1.5.2
Patches
Vulnerability mechanics
References
5- imgur.com/a/hVlgpCgmitreexploit
- www.exploit-db.com/exploits/50923mitreexploit
- www.vulncheck.com/advisories/beehive-forum-account-takeovermitrethird-party-advisory
- sourceforge.net/projects/beehiveforum/mitreproduct
- www.beehiveforum.co.ukmitreproduct
News mentions
0No linked articles in our index yet.