9.8
CVSSv3

CVE-2009-2168

Published: 22/06/2009 Updated: 13/02/2024
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and previous versions sends a redirect to the web browser but does not exit when the supplied credentials are incorrect, which allows remote malicious users to bypass authentication by providing arbitrary username and password parameters.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

egyplus 7ammel

Exploits

|| || | || o_,_7 _|| _o_7 _|| q_|_|| o_\\\_, ( : / (_) / ( =By: Qabandi =Email: iqa[a]hotmailfr From Kuwait, PEACE =Vuln: EgyPlus 7ml <= 101 - Cookie Auth Bypass SQL injection vulnerability (CABSIV) =INFO: egyplusorg/article-2htm =Download: ht ...