chetans9/core-php-admin-panel

chetans9/core-php-admin-panel

Releases0
Stars285
An Admin panel written in core php with CRUD, filters and pagination.

CVE History

CVEPublishedCVSS v3CVSS v2
7.5 HIGH

chetans9 core-php-admin-panel through commit a94a780d6 contains an authentication bypass vulnerability in includes/auth_validate.php. The application sends an HTTP redirect via header(Location:login.php) when a user is not authenticated but fails to call exit() afterward. This allows remote unauthenticated attackers to access protected pages.customer database.