pbssubhash
Just popping in
Posted on: 2015/1/11 17:11
#1
I found that there is missing rate-limiting protection at login panel of the Xoops CMS by using which an attacker can guess the passwords using brute force attacks.
I'd be more than happy to provide PoC's for this particular bug.
Thanks.
[Security-Bug]Missing ratelimiting at login panel can result in a brute force
2015/1/11 17:11 Hey,I found that there is missing rate-limiting protection at login panel of the Xoops CMS by using which an attacker can guess the passwords using brute force attacks.
I'd be more than happy to provide PoC's for this particular bug.
Thanks.
