Security Advisory
CVE-2020-37156
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
BloodX 1.0 contains an authentication bypass vulnerability in login.php that allows attackers to access the dashboard without valid credentials. Attackers can exploit the vulnerability by sending a crafted payload with =or parameters to bypass login authentication and gain unauthorized access.