Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
plugins/box/users/users.plugin.php in Monstra CMS 3.0.4 allows Login Rate Limiting Bypass via manipulation of the login_attempts cookie.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Monstra CMS 安全漏洞
Vulnerability Description
Monstra CMS是乌克兰软件开发者Sergey Romanenko所研发的一套基于PHP的轻量级内容管理系统（CMS）。该系统具有易于安装使用、可扩展等特点。 Monstra CMS 3.0.4版本中的plugins/box/users/users.plugin.php文件存在安全漏洞。攻击者可通过操纵login_attempts利用该漏洞绕过登录表单中的暴力破解保护。
CVSS Information
N/A
Vulnerability Type
N/A