Low severity · published Apr 27, 2026
CVE-2026-7103
code-projects Chat System MD5 Hash update_user.php weak hash
3.7
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability was determined in code-projects Chat System 1.0. Affected is an unknown function of the file update_user.php of the component MD5 Hash Handler. This manipulation of the argument Password causes use of weak hash. The attack is possible to be carried out remotely. The attack's complexity is rated as high. The exploitability is told to be difficult. The exploit has been publicly disclosed and may be utilized.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 15% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Chat System · code-projects
1.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-7103
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-7103
code-projects.org
https://code-projects.org/
gist.github.com
https://gist.github.com/higordiego/84ae7f08f5c23debebf309de3920bda2
vuldb.com
https://vuldb.com/submit/800384
vuldb.com
https://vuldb.com/vuln/359678
vuldb.com
https://vuldb.com/vuln/359678/cti
More from Chat System
9.8
CVE-2024-13035
code-projects Chat System update_user.php sql injection
8.8
CVE-2025-7189
code-projects Chat System send_message.php sql injection
8.8
CVE-2025-7188
code-projects Chat System addmember.php sql injection
8.8
CVE-2025-7187
code-projects Chat System fetch_member.php sql injection
8.8
CVE-2025-7186
code-projects Chat System fetch_chat.php sql injection
