CVE Catalog

CVE-2017-11187

Critical
Published: Translated: NVD NIST

Summary

phpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks that try many passwords in attempted logins quickly.

Risk Assessment

The lack of proper protections may lead to unauthorized access to user accounts, posing a serious threat to data security.

Recommendation

It is recommended to upgrade phpMyFAQ to version 2.9.8 or later to minimize the risk of brute-force attacks.

Original NVD description (English source)

phpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks that try many passwords in attempted logins quickly.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS