CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

NVD•added 2019/02/17 9:29 p.m.•9 views

CVE-2019-7649

global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing...

7.5CVSS7.7AI score0.00124EPSS

Exploits1References1

Prion•added 2019/02/17 9:29 p.m.•9 views

Out-of-bounds

global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing...

5CVSS7.7AI score0.00124EPSS

Exploits1References1Affected Software1

CVE•added 2019/02/17 9:0 p.m.•47 views

CVE-2019-7649

CMSWing 1.3.7 contains a weakness in global.encryptPassword (bootstrap/global.js) where password hashing relies on multiple MD5 operations. This is documented as a weak‑encryption vulnerability that can be brute‑forced, potentially allowing an attacker to break user passwords. The CVE is corrobor...

7.5CVSS7.6AI score0.00124EPSS

Exploits1References1Affected Software1