Total vulnerabilities in the database
phpList 3.5.3 allows type juggling for login bypass because == is used instead of === for password hashes, which mishandles hashes that begin with 0e followed by exclusively numerical characters.
| Software | From | Fixed in |
|---|---|---|
| phplist / phplist | 3.5.3 | 3.5.3.x |