chetans9 core-php-admin-panel through commit a94a780d6 contains an authentication bypass vulnerability in includes/auth_validate.php. The application sends an HTTP redirect via header(Location:login.php) when a user is not authenticated but fails to call exit() afterward. This allows remote unauthenticated attackers to access protected pages.customer database.
CVSS
No CVSS.
References
Configurations
No configuration.
History
03 Feb 2026, 18:16
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2026-02-03 18:16
Updated : 2026-02-03 18:16
NVD link : CVE-2025-70758
Mitre link : CVE-2025-70758
CVE.ORG link : CVE-2025-70758
JSON object : View
Products Affected
No product.
CWE
No CWE.