CVE-2025-70758
High
Description
chetans9 core-php-admin-panel through commit a94a780d6 contains an authentication bypass vulnerability in includes/auth_validate.php. The application sends an HTTP redirect via header(Location:login.php) when a user is not authenticated but fails to call exit() afterward. This allows remote unauthenticated attackers to access protected pages.customer database.
SeverityHigh
CVSS7.5
Exploit probability—
ProductChetans9 Core-php-admin-panel
PublishedFeb 3, 2026
First seenFeb 3, 2026
Weakness typeCWE-703CWE-703
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chetans9 core-php-admin-panel | v ≤ commit a94a780d6 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.