CVE-2025-70758
chetans9 core-php-admin-panel through commit a94a780d6 contains an authentication bypass vulnerability in includes/auth_validate.php. The application sends an HTTP redirect via header(Location:login.php) when a user is not authenticated but fails to call exit() afterward. This allows remote unauthenticated attackers to access protected pages.customer database.
Vendor
-
Product
-
CWE
Yayın Tarihi
2026-02-03 18:16:18
Güncelleme
2026-02-11 18:16:07
Source Identifier
cve@mitre.org
KEV Date Added
-