CVE-2017-9091

/admin/loginc.php in Allen Disk 1.6 doesn't check if isset$SESSION'captcha''code' == 1, which leads to CAPTCHA bypass by emptying $POST'captcha'...

PT-2017-18695

Name of the Vulnerable Software and Affected Versions Allen Disk version 1.6 Description The issue concerns a CAPTCHA bypass in the login functionality. Specifically, the /admin/loginc.php endpoint does not properly check if the CAPTCHA code has been set, allowing for bypass by emptying the captc...

CVE-2017-9091: Improper Input Validation

/admin/loginc.php in Allen Disk 1.6 doesn't check if isset$SESSION'captcha''code' == 1, which leads to CAPTCHA bypass by emptying $POST'captcha'...