search

cxdcox / DVWA

git clone https://github.com/ethicalhack3r/DVWA.git
GNU General Public License v3.0
1 stars 0 forks source link

CX Use_of_Broken_or_Risky_Cryptographic_Algorithm @ vulnerabilities/captcha/source/high.php [master] #113

Open cxdcox opened 4 years ago

cxdcox commented 4 years ago

Use_of_Broken_or_Risky_Cryptographic_Algorithm issue exists @ vulnerabilities/captcha/source/high.php in branch master

In <?php, the application protects sensitive data using a cryptographic algorithm, md5, that is considered weak or even trivially broken, in vulnerabilities\captcha\source\high.php at line 1. 

Severity: Low

CWE:327

Checkmarx

Lines: 27

Code (Line #27):

            $pass_new = md5( $pass_new );