1. Home
  2. CVE Database
  3. CVE-2009-2168
CRITICAL · 9.8

CVE-2009-2168

cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier sends a redirect to the web browser but does not exit when the supplied credentials are incorrect, which allows remote attackers to bypas...

Vulnerability Description

cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier sends a redirect to the web browser but does not exit when the supplied credentials are incorrect, which allows remote attackers to bypass authentication by providing arbitrary username and password parameters.

CVSS Score

9.8

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Egyplus7Ammel<= 1.0.1

Related Weaknesses (CWE)

CWE-287

References

FAQ

What is CVE-2009-2168?

CVE-2009-2168 is a vulnerability with a CVSS score of 9.8 (CRITICAL). cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier sends a redirect to the web browser but does not exit when the supplied credentials are incorrect, which allows remote attackers to bypas...

How severe is CVE-2009-2168?

CVE-2009-2168 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2009-2168?

Check the references section above for vendor advisories and patch information. Affected products include: Egyplus 7Ammel.