CVE-2026-85586
2026-09-04
12h17 +00:00
12h17 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
CVE 描述
phpMyFAQ versions before 4.1.8 fail to validate CAPTCHA when the store parameter is set to 'now' in question submission requests. Unauthenticated attackers can bypass CAPTCHA protection and submit unlimited questions directly, causing database pollution and triggering outgoing mail notifications.
CVE 信息
相关弱点
| 弱点名称 | 来源 | |
|---|---|---|
| Improper Control of Interaction Frequency The product does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests. |
