panel_login.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead of !== for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters.
References
Link | Resource |
---|---|
https://xavibel.com/2020/01/22/usebb-forum-php-type-juggling-vulnerability/ | Exploit Third Party Advisory |
Configurations
Information
Published : 2020-01-27 12:15
Updated : 2021-07-21 04:39
NVD link : CVE-2020-8088
Mitre link : CVE-2020-8088
JSON object : View
CWE
Products Affected
usebb
- usebb