CVE-2026-7103

LowCVSS 3.7

Published: 27/04/2026(UTC)Updated: 26/10/2026(UTC)Translated: 26/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

14th percentile - higher than 14% of all known CVEs

Summary

A vulnerability was found in Chat System 1.0 involving use of a weak hash (MD5) when handling the Password argument in update_user.php. The attack is remotely possible, though rated high complexity, and a public exploit has been disclosed.

Risk Assessment

Weak password hashing makes credentials easier to crack if the database leaks, potentially leading to account takeover.

Recommendation

Replace MD5 with a strong password hashing algorithm (e.g., bcrypt, Argon2) and apply security updates to the application.

Other vulnerabilities in Chat System

CVE-2026-7090Low
A vulnerability was detected in code-projects Chat System 1.0. It affects an unknown function in /admin/send_message.php within the Chat Interface component. Manipulation of the msg argument results in cross site scripting, and the attack may be launched remotely.

Original NVD description (English source)

A vulnerability was determined in code-projects Chat System 1.0. Affected is an unknown function of the file update_user.php of the component MD5 Hash Handler. This manipulation of the argument Password causes use of weak hash. The attack is possible to be carried out remotely. The attack's complexity is rated as high. The exploitability is told to be difficult. The exploit has been publicly disclosed and may be utilized.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS