Lucene search
GoogleOSV:CVE-2020-23361HistoryJan 27, 2021 - 4:15 p.m.
CVE-2020-23361
2021-01-2716:15:13
Google
osv.dev
5
phplist
login bypass
vulnerability
cve-2020-23361
password hashes
type juggling
phpList 3.5.3 allows type juggling for login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters.
References
Related
prion
prion
Design/Logic Flaw
2021-01-27 16:15:00
cvelist
cvelist
CVE-2020-23361
2021-01-27 15:30:07
osv
osv
BIT-phplist-2020-23361
2024-03-06 11:02:23
nvd
nvd
CVE-2020-23361
2021-01-27 16:15:13
cve
cve
CVE-2020-23361
2021-01-27 16:15:13
openvas
openvas
phpList < 3.5.4 Multiple Vulnerabilities
2021-07-02 00:00:00