https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 18 Oct 2026 16:30:34 +0000 https://cve.radiocsirt.org/vuln/cnvd-2018-09404 cnvd-2018-09404 https://cve.radiocsirt.org/vuln/cnvd-2018-09404 https://cve.radiocsirt.org/vuln/euvd-2026-64620 EUVD-2026-64620 https://cve.radiocsirt.org/vuln/euvd-2026-64620 https://cve.radiocsirt.org/vuln/fkie_cve-2018-10362 <p>An issue was discovered in phpLiteAdmin 1.9.5 through 1.9.7.1. Due to loose comparison with &#39;==&#39; instead of &#39;===&#39; in classes/Authorization.php for the user-provided login password, it is possible to login with a simpler password if the password has the form of a power in scientific notation (like &#39;2e2&#39; for &#39;200&#39; or &#39;0e1234&#39; for &#39;0&#39;). This is possible because, in the loose comparison case, PHP interprets the string as a number in scientific notation, and thus converts it to a number. After that, the comparison with &#39;==&#39; casts the user input (e.g., the string &#39;200&#39; or &#39;0&#39;) to a number, too. Hence the attacker can login with just a &#39;0&#39; or a simple number he has to brute force. Strong comparison with &#39;===&#39; prevents the cast into numbers.</p> <p>An issue was discovered in phpLiteAdmin 1.9.5 through 1.9.7.1. Due to loose comparison with &#39;==&#39; instead of &#39;===&#39; in classes/Authorization.php for the user-provided login password, it is possible to login with a simpler password if the password has the form of a power in scientific notation (like &#39;2e2&#39; for &#39;200&#39; or &#39;0e1234&#39; for &#39;0&#39;). This is possible because, in the loose comparison case, PHP interprets the string as a number in scientific notation, and thus converts it to a number. After that, the comparison with &#39;==&#39; casts the user input (e.g., the string &#39;200&#39; or &#39;0&#39;) to a number, too. Hence the attacker can login with just a &#39;0&#39; or a simple number he has to brute force. Strong comparison with &#39;===&#39; prevents the cast into numbers.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-10362 https://cve.radiocsirt.org/vuln/ghsa-pm5v-j6jx-wmr3 <p>An issue was discovered in phpLiteAdmin 1.9.5 through 1.9.7.1. Due to loose comparison with &#39;==&#39; instead of &#39;===&#39; in classes/Authorization.php for the user-provided login password, it is possible to login with a simpler password if the password has the form of a power in scientific notation (like &#39;2e2&#39; for &#39;200&#39; or &#39;0e1234&#39; for &#39;0&#39;). This is possible because, in the loose comparison case, PHP interprets the string as a number in scientific notation, and thus converts it to a number. After that, the comparison with &#39;==&#39; casts the user input (e.g., the string &#39;200&#39; or &#39;0&#39;) to a number, too. Hence the attacker can login with just a &#39;0&#39; or a simple number he has to brute force. Strong comparison with &#39;===&#39; prevents the cast into numbers.</p> <p>An issue was discovered in phpLiteAdmin 1.9.5 through 1.9.7.1. Due to loose comparison with &#39;==&#39; instead of &#39;===&#39; in classes/Authorization.php for the user-provided login password, it is possible to login with a simpler password if the password has the form of a power in scientific notation (like &#39;2e2&#39; for &#39;200&#39; or &#39;0e1234&#39; for &#39;0&#39;). This is possible because, in the loose comparison case, PHP interprets the string as a number in scientific notation, and thus converts it to a number. After that, the comparison with &#39;==&#39; casts the user input (e.g., the string &#39;200&#39; or &#39;0&#39;) to a number, too. Hence the attacker can login with just a &#39;0&#39; or a simple number he has to brute force. Strong comparison with &#39;===&#39; prevents the cast into numbers.</p> https://cve.radiocsirt.org/vuln/ghsa-pm5v-j6jx-wmr3 https://cve.radiocsirt.org/vuln/gsd-2018-10362 gsd-2018-10362 https://cve.radiocsirt.org/vuln/gsd-2018-10362 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10362 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: phpliteadmin</p> <p>An issue was discovered in phpLiteAdmin 1.9.5 through 1.9.7.1. Due to loose comparison with &#39;==&#39; instead of &#39;===&#39; in classes/Authorization.php for the user-provided login password, it is possible to login with a simpler password if the password has the form of a power in scientific notation (like &#39;2e2&#39; for &#39;200&#39; or &#39;0e1234&#39; for &#39;0&#39;). This is possible because, in the loose comparison case, PHP interprets the string as a number in scientific notation, and thus converts it to a number. After that, the comparison with &#39;==&#39; casts the user input (e.g., the string &#39;200&#39; or &#39;0&#39;) to a number, too. Hence the attacker can login with just a &#39;0&#39; or a simple number he has to brute force. Strong comparison with &#39;===&#39; prevents the cast into numbers.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: phpliteadmin</p> <p>An issue was discovered in phpLiteAdmin 1.9.5 through 1.9.7.1. Due to loose comparison with &#39;==&#39; instead of &#39;===&#39; in classes/Authorization.php for the user-provided login password, it is possible to login with a simpler password if the password has the form of a power in scientific notation (like &#39;2e2&#39; for &#39;200&#39; or &#39;0e1234&#39; for &#39;0&#39;). This is possible because, in the loose comparison case, PHP interprets the string as a number in scientific notation, and thus converts it to a number. After that, the comparison with &#39;==&#39; casts the user input (e.g., the string &#39;200&#39; or &#39;0&#39;) to a number, too. Hence the attacker can login with just a &#39;0&#39; or a simple number he has to brute force. Strong comparison with &#39;===&#39; prevents the cast into numbers.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-10362