phpList Incorrect Comparison Vulnerability - CVE-2020-23361 - Vulnerability Database

phpList Incorrect Comparison Vulnerability - CVE-2020-23361

Critical

Reference: CVE-2020-23361

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2020-23361

Title: phpList Incorrect Comparison Vulnerability

Overview:

phpList 3.5.3 allows type juggling for login bypass because is used instead of for password hashes which mishandles hashes that begin with 0e followed by exclusively numerical characters.