Description

phpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks that try many passwords in attempted logins quickly.

Remediation

References

CVE-2017-11187

Related Vulnerabilities

Grafana Authentication Bypass by Spoofing Vulnerability (CVE-2023-3128)

MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-4301)

Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-28169)

Liferay DXP Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2024-8980)

WordPress Plugin GS Logo Slider-Ticker, Grid, List, Table & Filter Views Cross-Site Scripting (3.3.7)

Severity

Critical

Classification

CVE-2017-11187 CWE-307 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities