captcha code project captcha code vulnerabilities and exploits

(subscribe to this query)

8.8

CVSSv3

Cross-Site Request Forgery (CSRF) vulnerability in Vinoj Cardoza's Captcha Code plugin <= 2.7 at WordPress.

Captcha Code Project Captcha Code

9.8

CVSSv3

The scu-captcha package in PyPI v0.0.1 to v0.0.4 included a code execution backdoor inserted by a third party.

Scu-captcha Project Scu-captcha

5.3

CVSSv3

simple-php-captcha before commit 9d65a945029c7be7bb6bc893759e74c5636be694 allows remote malicious users to automatically generate the captcha response by running the same code on the client-side.

Simple-php-captcha Project Simple-php-captcha

6.1

CVSSv3

A vulnerability classified as problematic was found in jianlinwei cool-php-captcha up to 0.2. This vulnerability affects unknown code of the file example-form.php. The manipulation of the argument captcha with the input %3Cscript%3Ealert(1)%3C/script%3E leads to cross site script...

Cool-php-captcha Project Cool-php-captcha

7.5

CVSSv3

/admin/loginc.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code']) == 1, which leads to CAPTCHA bypass by emptying $_POST['captcha'].

Allen Disk Project Allen Disk 1.6

7.5

CVSSv3

reg.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code'])==1, which makes it possible to bypass the CAPTCHA via an empty $_POST['captcha'].

Allen Disk Project Allen Disk 1.6

9.8

CVSSv3

ThinkPHP50-CMS v1.0 contains a remote code execution (RCE) vulnerability in the component /public/?s=captcha.

Thinkphp50-cms Project Thinkphp50-cms 1.0

9.8

CVSSv3

The sr_freecap (aka freeCap CAPTCHA) extension 2.4.5 and below and 2.5.2 and below for TYPO3 fails to sanitize user input, which allows execution of arbitrary Extbase actions, resulting in Remote Code Execution.

Sr Freecap Project Sr Freecap

6.1

CVSSv3

A vulnerability classified as problematic was found in SourceCodester Phone Shop Sales Managements System 1.0. This vulnerability affects unknown code of the file /osms/assets/plugins/jquery-validation-1.11.1/demo/captcha/index.php of the component CAPTCHA Handler. The manipulati...

Phone Shop Sales Managements System Project Phone Shop Sales Managements System 1.0

9

CVSSv3

PHP remote file inclusion vulnerability in the Gwolle Guestbook plugin prior to 1.5.4 for WordPress, when allow_url_include is enabled, allows remote authenticated users to execute arbitrary PHP code via a URL in the abspath parameter to frontend/captcha/ajaxresponse.php. NOTE: t...

Gwolle Guestbook Project Gwolle Guestbook

1 EDB exploit

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook