CVE-2018-14940

PHPCMS 9 is affected by CVE-2018-14940 where remote attackers can trigger a denial of service by sending oversized font_size, height, and width values to api.php?op=checkcode. The connected sources reiterate the same description and CVSS data (NVD), with no concrete remediation details provided i...

PT-2018-12816

Name of the Vulnerable Software and Affected Versions PHPCMS version 9 Description The issue allows remote attackers to cause a denial of service, specifically resource consumption, by sending a request to the "api.php?op=checkcode" endpoint with large values for the font size, height, and width...

CVE-2018-14940: Uncontrolled Resource Consumption

PHPCMS 9 allows remote attackers to cause a denial of service resource consumption via large fontsize, height, and width parameters in an api.php?op=checkcode request...