Skip to content
OpenAdvisories

Product · cjbi

admin3

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.9
    CVE-2026-92921

    admin3 through 3.0.0 Weak Password Hashing via Single-Round MD5

    admin3 through 3.0.0 stores account passwords using single-round MD5 with only the username as salt and no key derivation function. Attackers with database access can recover plaintext passwords through offline dictionary or brute-force attacks due to negligi…

    cjbi admin3
  • Medium 5.4
    CVE-2026-92920

    admin3 through 3.0.0 Session Not Invalidated When a User Account Is Disabled

    admin3 through 3.0.0 fails to invalidate existing sessions when disabling a user account, allowing attackers to retain authenticated access with original permissions. Attackers can continue using bearer tokens issued before account disablement to authenticate…

    cjbi admin3