CVE-2008-4616

The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-supplied values to calculate a shared key...

Design/Logic Flaw

The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-supplied values to calculate a shared key...

CVE-2008-4616

The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-supplied values to calculate a shared key...

CVE-2008-4616

The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-supplied values to calculate a shared key...

CVE-2008-4616

The CVE-2008-4616 entry concerns the SpamBam plugin for WordPress, where remote attackers can bypass restrictions and add blog comments by using server-supplied values to calculate a shared key. Connected sources confirm this is a design/logic flaw rather than a typical exploit chain. Impact is t...

WordPress SpamBam Plugin - BYPASS

Because of this vulnerability, the attackers can bypass restrictions and add blog comments by using server-supplied values to calculate a shared key. Solution Update the plugin...

CVE-2008-4616: Improper Input Validation

The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-supplied values to calculate a shared key...

Exploiting the SpamBam plugin for wordpress

The attached exploit demonstrates that the WordPress SpamBam plugin can be bypassed due to relying on the client for security. Vulnerable software: SpamBam http://wordpress.org/extend/plugins/spambam/ by Gareth Heyes Vulnerability: No matter how hard you ofuscate or encrypt your code, never, unde...

Spambam <= 2.1 - Authorisation Bypass

There is no fix for this, as it's a design flaw. Plugin has been closed by WordPress...

WordPress Plugin SpamBam - Key Calculation Security Bypass

source: https://www.securityfocus.com/bid/27291/info SpamBam is prone to a security-bypass vulnerability because client-accessible data can be used to calculate verification keys. Attackers can exploit this issue to submit arbitrary form data via automated scripts and distribute spam...