Password Reset

Using a password reset while inserting an email address via GET and POST method.
$_REQUEST as an array favors POST over GET. So, sending the attacker email address via POST with the GET query parameter.