CVE-2018-12993

onefilecms.php in OneFileCMS through 2012-04-14 might allow attackers to conduct brute-force attacks via the onefilecms_username and onefilecms_password fields.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-06-29

Last modified

2024-08-05

Weaknesses

CWE-307

Affected products

• Onefilecms (Onefilecms)

References

• https://github.com/rocktronica/OneFileCMS/issues/6