CatDV Server: Factory-Default Empty Admin Password

CatDV Server 10.7.8 ships a factory-default database seed (create_catdv.sql) that creates the admin user with password=0 and passwordHash=NULL. The verification routine skips the PBKDF2 path when the hash is null and falls back to a legacy simpleMD5Hash path where simpleMD5Hash("") returns 0 and 0 == 0 evaluates to true — anyone who can reach the web login endpoint authenticates as the built-in administrator with an empty password, the credential prerequisite for the authenticated root RCE chain.