CVE-2009-2951
phenotype-cms phenotype cms: no CVSS score yet. EPSS 0.6% chance of exploitation in the next 30 days.
Phenotype CMS before 2.9 does not use a random salt value for password encryption, which makes it easier for context-dependent attackers to determine cleartext passwords.
- EPSS
- 0.6% chance of exploitation in the next 30 days; higher than 49% of CVEs (scores of 2026-10-31)
- CWE
- CWE-310
- Published
- Modified
- Record from
- the NVD, synced
Affected
- phenotype-cms:phenotype_cms