CyberRota Analysis
AI-GeneratedA vulnerability exists in the authentication storage component of aircheng-org iWebShop-5 versions up to 5.15, where improper handling of password arguments can result in weak password hashes due to insufficient computational effort. Although the attack is complex and difficult to exploit, it can be executed remotely, potentially compromising user credentials. Organizations using this software should prioritize remediation to mitigate the risk of unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
A flaw has been found in aircheng-org iWebShop-5 up to 5.15. This impacts an unknown function of the file controllers/admin.php of the component Authentication Storage. Executing a manipulation of the argument Password can lead to password hash with insufficient computational effort. It is possible to launch the attack remotely. A high complexity level is associated with this attack. The exploitability is said to be difficult. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.