What’s Vulnerable › Vulnerabilities
CVE-2017-8827
- Severity: critical (CVSS 9.1 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.6% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2017-05-08 · updated 2026-06-17
- Weakness: CWE-287
Description
forgotpassword.php in GeniXCMS 1.0.2 lacks a rate limit, which might allow remote attackers to cause a denial of service (login inability) or possibly conduct Arbitrary User Password Reset attacks via a series of requests.
Affected products
- Genixcms: 1.0.2
References
Get alerted when CVE-2017-8827 or the next vulnerability affects your stack