CVE-2017-8827 | BDVDB-2026-85174 Detail

Description#

forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service (login inability) or possibly conduct Arbitrary User Password Reset attacks via a series of requests.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/semplon/GeniXCMS/issues/75

Exploit#

No public exploit known

History#

Version 12017-05-08Record published in the CVE List.
Version 22024-08-05Most recent update recorded in the CVE List.