Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Monstra 3.0.1 and earlier uses a cookie to track how many login attempts have been attempted, which allows remote attackers to conduct brute force login attacks by deleting the login_attempts cookie or setting it to certain values.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Monstra 信任管理漏洞
Vulnerability Description
Monstra是乌克兰软件开发者Sergey Romanenko所研发的一套基于PHP的轻量级内容管理系统（CMS）。该系统具有易于安装使用、可扩展等特点。 Monstra 3.0.1及之前版本中存在安全漏洞，该漏洞源于程序使用cookie追踪登录尝试的数量。远程攻击者可通过删除login_attempts cookie或将其设置为特定值利用该漏洞实施暴力破解攻击，登录系统。
CVSS Information
N/A
Vulnerability Type
N/A