Описание
phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests. Unauthenticated attackers can bypass CAPTCHA protection and submit unlimited questions directly, causing database pollution and triggering outgoing mail notifications.
EPSS
Дефекты
Связанные уязвимости
phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests. Unauthenticated attackers can bypass CAPTCHA protection and submit unlimited questions directly, causing database pollution and triggering outgoing mail notifications.
Уязвимость веб-приложения phpMyFAQ, связанная с недостаточным контролем за частотой взаимодействий, позволяющая нарушителю обойти существующие механизмы безопасности
EPSS