CVE-2020-8547

2020-02-0315:52:13

mitre

www.cve.org

AI Score

9.7

Confidence

High

EPSS

0.128

Percentile

95.5%

JSON

phpList 3.5.0 allows type juggling for admin login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters.

References

www.exploit-db.com/exploits/47989