The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which makes Blackboard Academic Suite 7.x stores MD5中的服务器储存直接由客户机程序提供的密码杂乱信息,远程攻击者通过javascript/md5.js杂乱信息计算并发送一个任意MDstring的修改过的客户机程序来访问任意帐号。
The server in Blackboard Academic Suite 7.x stores MD5 password hashes that are provided directly by clients, which makes Blackboard Academic Suite 7.x stores MD5中的服务器储存直接由客户机程序提供的密码杂乱信息,远程攻击者通过javascript/md5.js杂乱信息计算并发送一个任意MDstring的修改过的客户机程序来访问任意帐号。