CVE-2020-37156CWE-288

BloodX 1.0 - Authentication Bypass

Medium · published February 11, 2026

CVSS v4.0
6.9
EPSS
0%
Percentile
27.4
In the wild
Unconfirmed
What it is

BloodX 1.0 contains an authentication bypass vulnerability in login.php that allows attackers to access the dashboard without valid credentials. Attackers can exploit the vulnerability by sending a crafted payload with '=''or' parameters to bypass login authentication and gain unauthorized access.

The record
Technical detail
CVSS v4.0
6.9 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.00350 · 27.4th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2026-02-11T20:49Z
EPSS history
Timeline
  • 11 FEB 20:49Z
    BloodX 1.0 - Authentication Bypass
    cvelistv5