4 matches found
Out-of-bounds
global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing...
5CVSS7.7AI score0.00891EPSS
SaveExploits1References1Affected Software1
CVE-2019-7649
global.encryptPassword in bootstrap/global.js in CMSWing 1.3.7 relies on multiple MD5 operations for password hashing...
7.5CVSS7.7AI score0.00891EPSS
SaveExploits1References1
CVE-2019-7649
CMSWing 1.3.7 contains a weakness in global.encryptPassword (bootstrap/global.js) where password hashing relies on multiple MD5 operations. This is documented as a weak‑encryption vulnerability that can be brute‑forced, potentially allowing an attacker to break user passwords. The CVE is corrobor...
7.5CVSS7.6AI score0.00891EPSS
SaveExploits1References1Affected Software1
20