CVE-2026-107829 — Jivejdon through 5.0 Unsalted MD5 Password Storage via AccountDaoSql
Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash() in AccountDaoSql. Attackers who ob…
Published: 2026-10-08 · CVSS: 8.2 · CVSS 4.0
Jivejdon through 5.0 contains a weak password storage vulnerability that stores account passwords as unsalted MD5 digests via ToolsUtil.hash() in AccountDaoSql. Attackers who obtain the user table through database access or SQL injection can crack passwords with precomputed tables or GPU attacks.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7