What’s Vulnerable › Vulnerabilities

CVE-2020-8088

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2020-01-27 · updated 2026-06-17

Description

panel_login.php in UseBB 1.0.12 allows type juggling for login bypass because != is used instead of !== for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters.

Affected products

• UseBB: 1.0.12

References

• https://xavibel.com/2020/01/22/usebb-forum-php-type-juggling-vulnerability/
• https://xavibel.com/2020/01/22/usebb-forum-php-type-juggling-vulnerability/

Get alerted when CVE-2020-8088 or the next vulnerability affects your stack