The (1) Textimage 4.7.x prior to 4.7-1.2 and 5.x prior to 5.x-1.1 module for Drupal and the (2) Captcha 4.7.x prior to 4.7-1.2 and 5.x prior to 5.x-1.1 module for Drupal allow remote malicious users to bypass the CAPTCHA test via an empty captcha element in $_SESSION.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
drupal drupal 4.7 |
||
drupal drupal 4.7_rev1.15 |
||
drupal drupal 5.0 |
||
drupal drupal 4.7.1 |
||
drupal drupal 4.7.2 |
||
drupal drupal 5.1 |
||
drupal textimage 4.7 |
||
drupal drupal 4.7.3 |
||
drupal drupal 4.7.4 |
||
drupal textimage 5.0 |
||
drupal drupal 4.7.5 |
||
drupal drupal 4.7.6 |
Vulmon