Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-pvgq-2pr4-wxj6

Опубликовано: 03 фев. 2026
Источник: github
Github: Не прошло ревью

Описание

chetans9 core-php-admin-panel through commit a94a780d6 contains an authentication bypass vulnerability in includes/auth_validate.php. The application sends an HTTP redirect via header(Location:login.php) when a user is not authenticated but fails to call exit() afterward. This allows remote unauthenticated attackers to access protected pages.customer database.

chetans9 core-php-admin-panel through commit a94a780d6 contains an authentication bypass vulnerability in includes/auth_validate.php. The application sends an HTTP redirect via header(Location:login.php) when a user is not authenticated but fails to call exit() afterward. This allows remote unauthenticated attackers to access protected pages.customer database.

EPSS

Процентиль: 15%
0.00048
Низкий

Связанные уязвимости

nvd
4 дня назад

chetans9 core-php-admin-panel through commit a94a780d6 contains an authentication bypass vulnerability in includes/auth_validate.php. The application sends an HTTP redirect via header(Location:login.php) when a user is not authenticated but fails to call exit() afterward. This allows remote unauthenticated attackers to access protected pages.customer database.

EPSS

Процентиль: 15%
0.00048
Низкий