This is information about a single report in the Awooga system.
| URLs | http://www.learn2crack.com/2013/08/develop-android-login-registration-with-php-mysql.html/4 | ||
|---|---|---|---|
| Issues | sql-injection | Unresolved | (No comments added) |
| password-inadequate-hashing | Unresolved |
SHA1/base64/salt home-made algorithm not a substitute for password_hash(). |
|
| deprecated-library | Unresolved | (No comments added) | |
| Description |
The usual SQL injection flaws in this one, the author has been notified. Also, the password hashing isn't strong enough. Looks like the login can be bypassed by changing the target user's password |
||
| Source | Repo: 1 | ||
| Author notified? | Yes, on 2014-10-21 | ||