Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-jpch-xv32-p766

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

phpList 3.5.0 allows type juggling for admin login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters.

phpList 3.5.0 allows type juggling for admin login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters.

EPSS

Процентиль: 87%
0.03293
Низкий

Дефекты

CWE-843

Связанные уязвимости

CVSS3: 9.8
nvd
около 6 лет назад

phpList 3.5.0 allows type juggling for admin login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters.

CVSS3: 9.8
debian
около 6 лет назад

phpList 3.5.0 allows type juggling for admin login bypass because == i ...

EPSS

Процентиль: 87%
0.03293
Низкий

Дефекты

CWE-843