CVE-2009-2168

CRITICAL

EgyPlus 7ammel <1.0.1 - Auth Bypass

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2009-2168. PoCs published by Qabandi.

AI-analyzed exploit summary This exploit demonstrates an SQL injection vulnerability in EgyPlus 7ml <= 1.0.1, allowing authentication bypass via manipulated cookie or POST data. The vulnerability arises from unsanitized user input in the login process.

Description

cpanel/login.php in EgyPlus 7ammel (aka 7ml) 1.0.1 and earlier sends a redirect to the web browser but does not exit when the supplied credentials are incorrect, which allows remote attackers to bypass authentication by providing arbitrary username and password parameters.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Qabandi · textwebappsphp
https://www.exploit-db.com/exploits/8865

This exploit demonstrates an SQL injection vulnerability in EgyPlus 7ml <= 1.0.1, allowing authentication bypass via manipulated cookie or POST data. The vulnerability arises from unsanitized user input in the login process.

Classification
Working Poc 90%
Attack Type
Sqli
Complexity
Trivial
Reliability
Reliable
Target: EgyPlus 7ml <= 1.0.1
No auth needed
Prerequisites: magic_quotes_gpc = Off · access to login page
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (1)

Core 1
Core References
Exploit, Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/8865

Scores

CVSS v3 9.8
EPSS 0.1178
EPSS Percentile 95.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact total

Details

CWE
CWE-287
Status published
Products (1)
egyplus/7ammel < 1.0.1
Published Jun 22, 2009
Tracked Since Feb 18, 2026