PT-2021-10886

Name of the Vulnerable Software and Affected Versions nibbleblog version 3.7.1c Description The issue allows for a login bypass due to type juggling in password hashes. This occurs because the code uses == instead of === for comparing password hashes, which can mishandle hashes starting with '0e'...

CVE-2020-23356: Undefined Security Weakness

dmin/kernel/api/login.class.phpin in nibbleblog v3.7.1c allows type juggling for login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters...