漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
WBCE CMS Header class.login.php increase_attempts excessive authentication
Vulnerability Description
A vulnerability, which was classified as problematic, has been found in WBCE CMS. Affected by this issue is the function increase_attempts of the file wbce/framework/class.login.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to improper restriction of excessive authentication attempts. The attack may be launched remotely. The name of the patch is d394ba39a7bfeb31eda797b6195fd90ef74b2e75. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-213716.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Vulnerability Title
WBCE CMS 安全漏洞
Vulnerability Description
WBCE CMS是一套基于PHP和MySQL的开源内容管理系统（CMS）。 WBCE CMS存在安全漏洞，该漏洞源于其Header Handler组件中wbce/framework/class.login.php文件的increase_attempts函数对X-Forwarded-For参数未适当地限制过多的身份验证尝试。
CVSS Information
N/A
Vulnerability Type
N/A