Login Page Vulnerable To Timing Attacks

[finlaywashere]

jQuery-Mobile-PHP-MVC/lib/models/user.php

Line 210 in a78a08c

if(md5($password . PASSWORD_SALT) == $db_password) {

Hello,

Your login page is vulnerable to a string comparison timing attack. This could allow an attacker to extract MD5 password hashes for arbitrary users to be cracked.