CVE-2024-34914

The php-censor application (v2.1.4) is vulnerable to a Weak Hashing Algorithm (CWE-328) because the rememberKey is generated using only the MD5 hash of the login timestamp without any salt or randomness. This oversight allows attackers to brute-force the remember_key value by iterating over poten...