Description

phpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks that try many passwords in attempted logins quickly.

Remediation

References

CVE-2017-11187

Related Vulnerabilities

WebLogic CVE-2021-2214 Vulnerability (CVE-2021-2214)

Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-20328)

WordPress Plugin PWA for WP & AMP Unspecified Vulnerability (1.0.8)

XOOPS Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2008-4433)

MySQL CVE-2013-2378 Vulnerability (CVE-2013-2378)

Severity

Critical

Classification

CVE-2017-11187 CWE-307 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities