CoreCVE
Back

CRITICAL

cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier sends a redirect to the web browser but does not exit when the supplied credentials are incorrect, which allows remote attackers to bypass authentication by providing arbitrary username and password parameters

Published Jun 22, 2009

Description

cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier sends a redirect to the web browser but does not exit when the supplied credentials are incorrect, which allows remote attackers to bypass authentication by providing arbitrary username and password parameters.

Affected products

Remediation

No remediation recorded yet.

Metrics

Weaknesses (1)

CWE-287

Improper Authentication

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Jun 22, 2009
Updated Jan 21, 2025
Reserved Jun 22, 2009
Link CVE-2009-2168
CISA Vulnrichment
Updated Feb 14, 2024
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2009-2168
Red Hat
Severity n/a
Public date n/a
Links CVE-2009-2168