Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

AppGini stores passwords with weak MD5 hash

CVE-2018-18587 · published 8 years ago
Summary

AppGini version 5.70 saves user passwords using the outdated MD5 method, which can be cracked quickly. This makes user accounts vulnerable to unauthorized access. Update the application to use a modern password‑hashing technique and have users change their passwords after the fix.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
bigprof appgini 5.70
cpe:2.3:a:bigprof:appgini:5.70:*:*:*:*:*:*:*
Original advisory text
BigProf AppGini 5.70 stores the passwords in the database using the MD5 hash.
BigProf AppGini 5.70 stores the passwords in the database using the MD5 hash.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-327Use of a Broken Cryptographic Algorithm
Timeline
Published23 Oct 2018
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2018-18587 · NVD
Track software like this
Free during beta