CVE-2017-11187: phpMyFAQ before 2.9.8 does not properly mitigate brute-force attacks that try many passwords in attempted l...

Security readout for executives and security teams

phpMyFAQ versions before 2.9.8 did not adequately slow or block rapid repeated login attempts. An exposed login page could let attackers try many passwords quickly, increasing the chance of account takeover if weak or reused passwords exist. Organizations running phpMyFAQ before 2.9.8 are potentially exposed, especially where the application login is reachable from the internet or broadly accessible internally. Treat this as a practical account-takeover risk, not a confirmed emergency. Prioritize remediation for exposed or business-critical phpMyFAQ systems, particularly where administrator accounts may use weak or reused passwords. Mitigation focus: Upgrade phpMyFAQ to 2.9.8 or later where applicable.; Review the vendor advisory for exact remediation guidance.; Restrict access to phpMyFAQ login pages where operationally feasible..

Prepared

Jun 13, 2026, 04:25 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.