Lucene search
Mohamedabdelhady93382B0B629-C56B-4651-AF3F-17F749751857HistoryDec 14, 2022 - 9:22 p.m.
Bypass All Captchas in the application
2022-12-1421:22:08
mohamedabdelhady933
www.huntr.dev
93
captcha bypass
unlimited requests
application security
0.002 Low
EPSS
Percentile
58.9%
Description
Bypass Captcha while adding a new Proposal for a new FAQ or Add question ,And send unlimited request without submit captcha code.
Proof of Concept
https://drive.google.com/file/d/140CMe4FLFLBmIUUbI87_06bZ4_zs4d7N/view?usp=sharing
Related
cve
cve
CVE-2023-0311
2023-01-15 22:15:10
github
github
phpMyFAQ Improper Authentication vulnerability
2023-01-16 00:30:24
osv
osv
CVE-2023-0311
2023-01-15 22:15:10
phpMyFAQ Improper Authentication vulnerability
2023-01-16 00:30:24
prion
prion
Authentication flaw
2023-01-15 22:15:00
nvd
nvd
CVE-2023-0311
2023-01-15 22:15:10
veracode
veracode
Improper Authentication
2023-01-27 09:18:46
cnvd
cnvd
phpMyFAQ authorization issue vulnerability
2023-01-16 00:00:00
cvelist
cvelist
CVE-2023-0311 Improper Authentication in thorsten/phpmyfaq
2023-01-15 00:00:00
openvas
openvas
phpMyFAQ < 3.1.10 Multiple Vulnerabilities
2023-01-16 00:00:00