Published: 10/08/2008 Updated: 08/08/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

The CAPTCHA implementation in (1) Pligg 9.9.5 and possibly (2) Francisco Burzi PHP-Nuke 8.1 provides a critical random number (the ts_random value) within the URL in the SRC attribute of an IMG element, which allows remote malicious users to pass the CAPTCHA test via a calculation that combines this value with the current date and the HTTP User-Agent string.

Vulnerable Product	Search on Vulmon	Subscribe to Product
pligg pligg 9.9.5
php-nuke php-nuke 8.1

source: wwwsecurityfocuscom/bid/30518/info Pligg is prone to a security-bypass weakness Successfully exploiting this issue will allow an attacker to register multiple new users through an automated process This may lead to other attacks Pligg 995 is vulnerable; other versions may also be affected <?php $sitekey=82397834; $ts ...

CWE-264 CWE-189 http://www.rooksecurity.com/blog/?p=17 http://www.securityfocus.com/bid/30518 https://exchange.xforce.ibmcloud.com/vulnerabilities/44192 https://nvd.nist.gov https://www.exploit-db.com/exploits/32142/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-3573

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect