Securimage Cross-Scripting Vulnerability

Securimage is an open source PHP CAPTCHA script for generating CAPTCHA images and CAPTCHA code . Securimage suffers from a cross-scripting vulnerability. An attacker exploits the vulnerability to inject arbitrary JavaScript code via a specially crafted URL, resulting in a cross-site scripting XSS...

Securimage 3.6.2 Cross Site Scripting

Advisory: Cross-site Scripting in Securimage 3.6.2 RedTeam Pentesting discovered a cross-site scripting XSS vulnerability in the Securimage CAPTCHA software, which allows attackers to inject arbitrary JavaScript code via a crafted URL. Details ======= Product: Securimage Affected Versions: = 3.2R...

Securimage-WP 3.2.4 - siwp_test.php URI XSS

The Securimage-WP WordPress plugin was affected by a siwptest.php URI XSS security vulnerability...

PHP Captcha / Securimage 2.0.2 - Authentication Bypass - SO-11-007

No description provided by source. Sense of Security - Security Advisory - SOS-11-007 Release Date. 20-May-2011 Last Update. - Vendor Notification Date. 04-Apr-2011 Product. Securimage / PHPCaptcha Platform. PHP Affected versions. 1.0.4 - 2.0.2 Severity Rating. Medium Impact. Authentication bypas...

Securimage example_form.php XSS

The version of Securimage on the remote host contains a flaw that allows a remote cross-site scripting vulnerability because the application does not validate the 'REQUESTURI' variable in the 'exampleform.php' script. An attacker may be able to leverage this to inject arbitrary HTML and script co...

WordPress Securimage 3.2.4 Cross Site Scripting Vulnerability

WordPress Securimage plugin version 3.2.4 suffers from a cross site scripting vulnerability. Wordpress Securimage-WP Plugin v3.2.4 URI-based XSS Vulnerability Vendor: Securimage PHP CAPTCHA Product web page: https://wordpress.org/extend/plugins/securimage-wp/ Affected version: 3.2.4 Summary:...

WordPress Securimage-WP Plugin - Cross Site Scripting

WordPress Securimage-WP plugin's "siwptest.php" is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal...

Wordpress Securimage-WP Plugin v3.2.4 URI-based XSS Vulnerability

Summary Securimage-WP adds powerful CAPTCHA protection to comment forms on posts and pages to help prevent comment spam from getting onto your site. Description Securimage-WP suffers from a XSS issue in 'siwptest.php' that uses the 'PHPSELF' variable. The vulnerability is present because there...

WordPress Plugin Securimage-WP - 'siwp_test.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/59816/info The Securimage-WP plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

WordPress Plugin Securimage-WP - siwp_test.php Cross-Site Scripting

WordPress Plugin Securimage-WP - siwptest.php Cross-Site Scripting source: https://www.securityfocus.com/bid/59816/info The Securimage-WP plugin for WordPress is prone to a cross-site-scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

WordPress Securimage 3.2.4 Cross Site Scripting

Wordpress Securimage-WP Plugin v3.2.4 URI-based XSS Vulnerability Vendor: Securimage PHP CAPTCHA Product web page: https://wordpress.org/extend/plugins/securimage-wp/ Affected version: 3.2.4 Summary: Securimage-WP adds powerful CAPTCHA protection to comment forms on posts and pages to help preven...

Securimage 3.5 URI-based Cross-Site Scripting Vulnerability

Summary Securimage is an open-source free PHP CAPTCHA script for generating complex images and CAPTCHA codes to protect forms from spam and abuse. Description Securimage suffers from a XSS issue in 'exampleform.php' that uses the 'REQUESTURI' variable. The vulnerability is present because there...

Securimage - 'example_form.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/59796/info Securimage is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal...

Securimage - example_form.php Cross-Site Scripting

Securimage - exampleform.php Cross-Site Scripting source: https://www.securityfocus.com/bid/59796/info Securimage is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the...

Securimage 3.5 Cross Site Scripting

Securimage 3.5 URI-based Cross-Site Scripting Vulnerability Vendor: Securimage PHP CAPTCHA Product web page: http://www.phpcaptcha.org Affected version: 3.5 Summary: Securimage is an open-source free PHP CAPTCHA script for generating complex images and CAPTCHA codes to protect forms from spam and...

PHPCaptcha / Securimage 2.0.2 - Authentication Bypass - SOS-11-007

Sense of Security - Security Advisory - SOS-11-007 Release Date. 20-May-2011 Last Update. - Vendor Notification Date. 04-Apr-2011 Product. Securimage / PHPCaptcha Platform. PHP Affected versions. 1.0.4 - 2.0.2 Severity Rating. Medium Impact. Authentication bypass Attack Vector. Remote without...

PHP Captcha Securimage 2.0.2 - Authentication Bypass

PHP Captcha Securimage 2.0.2 - Authentication Bypass Sense of Security - Security Advisory - SOS-11-007 Release Date. 20-May-2011 Last Update. - Vendor Notification Date. 04-Apr-2011 Product. Securimage / PHPCaptcha Platform. PHP Affected versions. 1.0.4 - 2.0.2 Severity Rating. Medium Impact...

PHP Captcha / Securimage 2.0.2 - Authentication Bypass

Sense of Security - Security Advisory - SOS-11-007 Release Date. 20-May-2011 Last Update. - Vendor Notification Date. 04-Apr-2011 Product. Securimage / PHPCaptcha Platform. PHP Affected versions. 1.0.4 - 2.0.2 Severity Rating. Medium Impact. Authentication bypass Attack Vector. Remote without...