CVE-2017-8827

CVE-2017-8827 describes a missing rate limit in the forgotpassword.php script of GeniXCMS version 1.0.2. This vulnerability allows remote attackers to potentially cause a denial of service by preventing legitimate users from logging in, or to conduct arbitrary user password reset attacks through repeated requests. With a CVSS score of 9.1 (CRITICAL), it presents a high-impact threat with low attack complexity, requiring no user interaction or privileges. While the vulnerability is severe, there is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.