Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pvgq-2pr4-wxj6

Опубликовано: 03 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 7.5

Описание

chetans9 core-php-admin-panel through commit a94a780d6 contains an authentication bypass vulnerability in includes/auth_validate.php. The application sends an HTTP redirect via header(Location:login.php) when a user is not authenticated but fails to call exit() afterward. This allows remote unauthenticated attackers to access protected pages.customer database.

chetans9 core-php-admin-panel through commit a94a780d6 contains an authentication bypass vulnerability in includes/auth_validate.php. The application sends an HTTP redirect via header(Location:login.php) when a user is not authenticated but fails to call exit() afterward. This allows remote unauthenticated attackers to access protected pages.customer database.

EPSS

Процентиль: 15%
0.0005
Низкий

7.5 High

CVSS3

Дефекты

CWE-703

Связанные уязвимости

CVSS3: 7.5
nvd
3 месяца назад

chetans9 core-php-admin-panel through commit a94a780d6 contains an authentication bypass vulnerability in includes/auth_validate.php. The application sends an HTTP redirect via header(Location:login.php) when a user is not authenticated but fails to call exit() afterward. This allows remote unauthenticated attackers to access protected pages.customer database.

EPSS

Процентиль: 15%
0.0005
Низкий

7.5 High

CVSS3

Дефекты

CWE-703