Description
BloodX 1.0 contains an authentication bypass vulnerability in login.php that allows attackers to access the dashboard without valid credentials. Attackers can exploit the vulnerability by sending a crafted payload with '=''or' parameters to bypass login authentication and gain unauthorized access.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| diveshlunker | BloodX | 1.0 | — |
References
- ExploitDB-47842 exploit
- BloodX GitHub Repository product
- VulnCheck Advisory: BloodX 1.0 - Authentication Bypass third-party-advisory