CVE-2018-17368

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

An issue was discovered in PublicCMS V4.0.180825. For an invalid login attempt, the response length is different depending on whether the username is valid, which makes it easier to conduct brute-force attacks.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
Sep 23, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-173694.8An issue was discovered in springboot_authority through 2017-03-06. There is stored XSS via the admin/role/edit roleKey, name, or descriptioCVE-2018-173749.8SQL Injection exists in the Auction Factory 4.5.5 component for Joomla! via the filter_order_Dir or filter_order parameter.CVE-2018-173759.8SQL Injection exists in the Music Collection 3.0.3 component for Joomla! via the id parameter.CVE-2018-173769.8SQL Injection exists in the Reverse Auction Factory 4.3.8 component for Joomla! via the filter_order_Dir, cat, or filter_letter parameter.CVE-2018-173779.8SQL Injection exists in the Questions 1.4.3 component for Joomla! via the term, userid, users, or groups parameter.CVE-2018-173789.8SQL Injection exists in the Penny Auction Factory 2.0.4 component for Joomla! via the filter_order_Dir or filter_order parameter.CVE-2018-173799.8SQL Injection exists in the Raffle Factory 3.5.2 component for Joomla! via the filter_order_Dir or filter_order parameter.CVE-2018-17387.1IBM Security Key Lifecycle Manager 2.6, 2.7, 3.0 could allow an authenticated user to obtain highly sensitive information or jeopardize systCVE-2018-173809.8SQL Injection exists in the Article Factory Manager 4.3.9 component for Joomla! via the start_date, m_start_date, or m_end_date parameter.CVE-2018-173819.8SQL Injection exists in the Dutch Auction Factory 2.0.2 component for Joomla! via the filter_order_Dir or filter_order parameter.CVE-2018-173829.8SQL Injection exists in the Jobs Factory 2.0.4 component for Joomla! via the filter_letter parameter.CVE-2018-173839.8SQL Injection exists in the Collection Factory 4.1.9 component for Joomla! via the filter_order or filter_order_Dir parameter.
CVE-2018-17368: Medium severity, CVSS 5.3 | Vulnix