CVE-2017-11187

The CVE concerns phpMyFAQ prior to version 2.9.8, where login brute-force protection is insufficient—allowing rapid, repeated invalid authentication attempts. The issue is tied to failure to mitigate brute-force attacks. Remediation evidenced across sources suggests upgrading to version 2.9.8 or ...