CVE-2020-8088

Publication date

2020-01-27 20:00:19

Family

mitre

State

PUBLISHED

Description

panel_login.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead of !== for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters.