| शीर्षक | YzmCMS V7.6 Weak Encoding for Password |
|---|
| विवरण | During the security review of "YzmCMS V7.6", I discovered a weak password hashing vulnerability in the password() function (/common/function/system.func.php). This vulnerability stems from the use of a double MD5 hashing scheme without salt for password storage. MD5 is a cryptographically broken hash function that is fast to compute, making it trivial for attackers to crack passwords using precomputed rainbow tables or GPU-accelerated brute-force attacks. The absence of a salt means identical passwords produce identical hashes, further amplifying the risk. If an attacker obtains the password database (e.g., via SQL injection or backup exposure), they can recover plaintext passwords for all users, including administrators, leading to full system compromise. |
|---|
| स्रोत | ⚠️ https://github.com/Witiers/CVEs/issues/6 |
|---|
| उपयोगकर्ता | Witiers (UID 99561) |
|---|
| सबमिशन | 29/08/2026 03:56 PM (1 महीना पहले) |
|---|
| संयम | 03/10/2026 09:27 PM (1 month later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 413375 [YzmCMS तक 7.6 MD5 system.func.php password pass कमजोर एन्क्रिप्शन] |
|---|
| अंक | 20 |
|---|