CVE-2020-37135

🗓️ 06 Feb 2026 23:14:07Reported by VulnCheckType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 4 Views🌐 WEB

AMSS++ 4.7 has an authentication bypass allowing login with default admin user '1234' to gain admin access.

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2020-37135	6 Feb 202623:14	–	attackerkb
CNNVD	AMSS++ 信任管理问题漏洞	7 Feb 202600:00	–	cnnvd
Cvelist	CVE-2020-37135 AMSS++ 4.7 - Backdoor Admin Account	6 Feb 202623:14	–	cvelist
NVD	CVE-2020-37135	7 Feb 202600:15	–	nvd
Packet Storm	📄 AMSS++ 4.7 Backdoor Admin Account	23 Feb 202600:00	–	packetstorm
Positive Technologies	PT-2026-6818	6 Feb 202600:00	–	ptsecurity
Vulnrichment	CVE-2020-37135 AMSS++ 4.7 - Backdoor Admin Account	6 Feb 202623:14	–	vulnrichment

Vulners

CNA

Node

amssplus amss++Match4.7

[
  {
    "vendor": "Amssplus",
    "product": "AMSS++",
    "versions": [
      {
        "version": "4.7",
        "status": "affected"
      }
    ]
  }
]

Source	Link
exploit-db	www.exploit-db.com/exploits/48114
vulncheck	www.vulncheck.com/advisories/amss-backdoor-admin-account

Parameter	Position	Path	Description	CWE
username	request body	innoobec/index.php	Authentication bypass using hardcoded credentials (admin/1234) to gain administrative access	CWE-798
password	request body	innoobec/index.php	Authentication bypass using hardcoded credentials (admin/1234) to gain administrative access	CWE-798

15 Apr 2026 00:35Current

5.4Medium risk

Vulners AI Score5.4

CVSS 3.17.5

CVSS 49.3

EPSS0.00033

SSVC

CWE-798