Описание
phpList 3.5.3 allows type juggling for login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters.
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| phplist | itp | package |
EPSS
Процентиль: 58%
0.00363
Низкий
Связанные уязвимости
CVSS3: 9.8
nvd
около 5 лет назад
phpList 3.5.3 allows type juggling for login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters.
github
больше 3 лет назад
phpList 3.5.3 allows type juggling for login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters.
EPSS
Процентиль: 58%
0.00363
Низкий