Submit #635503: macrozheng mall ≤ v1.0.3 CWE-521
| Title | macrozheng mall ≤ v1.0.3 CWE-521 |
|---|---|
| Description | In mall versions up to v1.0.3, the application uses an improper password policy and does not validate the username or password during registration, resulting in a risk of brute-force attacks. |
| Source | ⚠️ https:/ |
| User | ez-lbz (UID 87033) |
| Submission | 08/15/2025 12:14 (10 months ago) |
| Moderation | 08/26/2025 22:48 (11 days later) |
| Status | Accepted |
| VulDB entry | 321507 [macrozheng mall up to 1.0.3 Registration weak password] |
| Points | 16 |