{
  "cveId": "CVE-2018-10362",
  "url": "https://patchblox.com/security/cve/CVE-2018-10362",
  "summary": "CVE-2018-10362 is fixed in 2 products on 1 platform, first by phpliteadmin 1.9.7.1-1ubuntu0.1, released April 24, 2018. It is not reported as exploited. Patch Radar priority: High.",
  "title": "phpliteadmin: An issue was discovered in phpLiteAdmin 1.9.5 through 1.9.7.1",
  "description": "An issue was discovered in phpLiteAdmin 1.9.5 through 1.9.7.1. Due to loose comparison with \u0027==\u0027 instead of \u0027===\u0027 in classes/Authorization.php for the user-provided login password, it is possible to login with a simpler password if the password has the form of a power in scientific notation (like \u00272e2\u0027 for \u0027200\u0027 or \u00270e1234\u0027 for \u00270\u0027). This is possible because, in the loose comparison case, PHP interprets the string as a number in scientific notation, and thus converts it to a number. After that, the comparison with \u0027==\u0027 casts the user input (e.g., the string \u0027200\u0027 or \u00270\u0027) to a number, too. Hence the attacker can login with just a \u00270\u0027 or a simple number he has to brute force. Strong comparison with \u0027===\u0027 prevents the cast into numbers.",
  "published": "2018-04-24T22:29:00Z",
  "severity": "High",
  "epss": 0.01495,
  "epssPercentile": 0.74332,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "phpliteadmin",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.9.7.1-1ubuntu0.1",
      "fix": "phpliteadmin 1.9.7.1-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-phpliteadmin-1.9.7.1-1ubuntu0.1",
      "released": "2018-04-24T22:29:00Z"
    },
    {
      "platform": "linux",
      "product": "phpliteadmin-themes",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "1.9.7.1-1ubuntu0.1",
      "fix": "phpliteadmin-themes 1.9.7.1-1ubuntu0.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-phpliteadmin-themes-1.9.7.1-1ubuntu0.1",
      "released": "2018-04-24T22:29:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}