CVE-2011-0759

Multiple cross-site request forgery CSRF vulnerabilities in the configuration page in the Recaptcha aka WP-reCAPTCHA plugin 2.9.8.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that disable the CAPTCHA requirement or insert cross-site scripting...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the configuration page in the Recaptcha aka WP-reCAPTCHA plugin 2.9.8.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that disable the CAPTCHA requirement or insert cross-site scripting...

CVE-2011-0759

Multiple cross-site request forgery CSRF vulnerabilities in the configuration page in the Recaptcha aka WP-reCAPTCHA plugin 2.9.8.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that disable the CAPTCHA requirement or insert cross-site scripting...

CVE-2011-0759

CVE-2011-0759 affects the WordPress WP-reCAPTCHA (Recaptcha) plugin up to version 2.9.8.2. The vulnerability is due to multiple cross-site request forgery (CSRF) vectors in the configuration page, allowing remote attackers to hijack administrator sessions and to inject or disable CAPTCHA/XSS cont...

PT-2011-2614

Name of the Vulnerable Software and Affected Versions WP-reCAPTCHA plugin version 2.9.8.2 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the configuration page of the WP-reCAPTCHA plugin for WordPress. These vulnerabilities allow remote attackers to...

CVE-2011-0759: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in the configuration page in the Recaptcha aka WP-reCAPTCHA plugin 2.9.8.2 for WordPress allow remote attackers to hijack the authentication of administrators for requests that disable the CAPTCHA requirement or insert cross-site scripting...

WP Recaptcha < 3.0 - Multiple CSRF

The wp-recaptcha WordPress plugin was affected by a Multiple CSRF security vulnerability...

Уязвимость в reCAPTCHA для Drupal

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Anti-automation уязвимости в reCAPTCHA для Drupal. В проекте MoBiC в 2007 году я уже писал об обходе reCaptcha для Drupal http://websecurity.com.ua/1505/. Это новый метод обхода reCaptcha для Drupal. Insufficient Anti-automation...

WordPress Recaptcha Plugin <= 2.9.8.2 - Multiple CSRF and XSS

Because of these cross-site request forgery vulnerabilities in the configuration page, the attackers can hijack the authentication of administrators for requests that disable the CAPTCHA requirement or insert cross-site scripting sequences. Solution Update the plugin...

Potential XSS vector in Zend_Service_ReCaptcha_MailHide

More info at https://framework.zend.com/security/advisory/ZF2010-05...

New Technique Beats Google's reCAPTCHA

Even the latest images in Google’s reCAPTCHA can be cracked with sufficient reliability to allow protective services to be exploited. Read the full article. The H Security...

Google + reCAPTCHA Could Raise Bar in Anti-Bot, Anti-Spam Fight

Locked in a cat-and-mouse game with spammers who use bots to defeat anti-fraud mechanisms and create fake accounts, Google today announced a deal to acquire reCAPTCHA, a company that provides those squiggly words at login screens. The ReCAPTCHA deal isn’t exactly a security transaction...

Vulnerability in Drupal Captcha

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Anti-automation уязвимости в плагине Captcha для Drupal. Данная капча уязвима для captcha token bypass method. Уязвимость я нашёл в плагине reCaptcha для Drupal который является под-плагином для плагина Captcha. Как сообщил Ben Maurer...