Captcha 2.12-3.8.1 - Captcha Bypass

The captcha WordPress plugin was affected by a Captcha Bypass security vulnerability...

Contact Form 7 <= 3.7.1 - CAPTCHA Bypass

The Contact Form 7 WordPress plugin was affected by a CAPTCHA Bypass security vulnerability...

IndiaNIC FAQs Manager 1.0 - CAPTCHA Value Disclosure

The faqs-manager WordPress plugin was affected by a CAPTCHA Value Disclosure security vulnerability...

SolveMedia 1.1.0 - plugins.php API Key Manipulation CSRF

The Solve Media CAPTCHA WordPress plugin was affected by a plugins.php API Key Manipulation CSRF security vulnerability...

SolveMedia 1.1.0 - solvemedia.admin.inc Admin Options Page CSRF

The Solve Media CAPTCHA WordPress plugin was affected by a solvemedia.admin.inc Admin Options Page CSRF security vulnerability...

WordPress Conditional CAPTCHA Plugin <= 3.6 - CSRF

This plugin is prone to a wp-conditional-captcha.php settings page CSRF. Solution Update the plugin...

WordPress Captcha Plugin <= 3.8.1 - Bypass

This plugin is prone to a BYPASS vulnerability. Solution Update the plugin...

Symantec Endpoint Protection Manager 12.1.4023.4080 Login Bruteforce

We discovered a vulnerability in the Symantec Endpoint Protection Manager web application. Vulnerability Type: Login Bruteforce Original Release: June 20, 2014 Discovered by: Security Team - A2SECURE Artëm Tsvetkov [email protected] Sisco Barrera [email protected] Andrea Bodei...

ecshop 2.7.3 /flow.php 登录绕过漏洞

影响文件:flow.php 188行开始elseif $REQUEST'step' == 'login' includeonce'languages/'. $CFG'lang'. '/user.php'; / 用户登录注册 / if $SERVER'REQUESTMETHOD' == 'GET' ..... else includeonce'includes/libpassport.php'; if !empty$POST'act' && $POST'act' == 'signin' $captcha = intval$CFG'captcha'; if $captcha &...

CmsEasy最新 V5.5-UTF8 正式版多处漏洞打包

简要描述： 补了20140605 详细说明： 首先是个注入，这个漏洞比较无语，真正的无视过滤，没引号保护。。 漏洞位于bbs/add-archive.php： checklogin; $category = dbbbscategory::getInstance; $categorydata = $category-getAll; $cid = isset$GET'cid' ? intval$GET'cid' : 1 ; $label = dbbbslabel::getInstance; $labledata = $label-getAll; ifisset$POST'submit'...

SMF <= 1.1.4 - Audio CAPTCHA Security Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/28866/info SMF Simple Machine Forum is prone to a security-bypass vulnerability that occurs in the audio CAPTCHA protocol. Successfully exploiting this issue may allow attackers to send unsolicited spam or perform other...

Peter's Math Anti-Spam for WordPress 0.1.6 Plugin Audio CAPTCHA Security Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/27287/info Peter's Math Anti-Spam for WordPress is prone to a security-bypass vulnerability. This issue occurs when presenting a visitor with challenge data to determine if they are a legitimate user or an automaton. The...

Joomla MS Comment Component 0.8.0b Security Bypass and Cross-Site Scripting Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/38250/info The MS Comment component for Joomla! is prone to a security-bypass vulnerability because it fails to properly sanitize user-supplied input. The component is also prone to a security-bypass vulnerability because...

Pligg 9.9.5 'CAPTCHA' Registration Automation Security Bypass Weakness

No description provided by source. source: http://www.securityfocus.com/bid/30518/info Pligg is prone to a security-bypass weakness. Successfully exploiting this issue will allow an attacker to register multiple new users through an automated process. This may lead to other attacks. Pligg 9.9.5 i...

WordPress Super CAPTCHA plugin <= 2.2.4 - SQL Injection Vulnerability

No description provided by source. Exploit Title: WordPress Super CAPTCHA plugin = 2.2.4 SQL Injection Vulnerability Date: 2011-08-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/super-capcha.2.2.4.zip Version: 2.2.4 tested...

PHP Captcha / Securimage 2.0.2 - Authentication Bypass - SO-11-007

No description provided by source. Sense of Security - Security Advisory - SOS-11-007 Release Date. 20-May-2011 Last Update. - Vendor Notification Date. 04-Apr-2011 Product. Securimage / PHPCaptcha Platform. PHP Affected versions. 1.0.4 - 2.0.2 Severity Rating. Medium Impact. Authentication bypas...

WordPress IndiaNIC FAQs Manager Plugin 1.0 - Multiple Vulnerabilities

No description provided by source. html !-- Exploit Title: WordPress IndiaNIC FAQ 1.0 Plugin CSRF + XSS Google Dork: inurl:wp-content/plugins/faqs-manager Date: 21.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage:...

Apache Archiva 1.0 - 1.3.1 CSRF Vulnerability

No description provided by source. ANATOLIA SECURITY ADVISORY -------------------------------------- ADVISORY INFO + Title: Apache Archiva Cross-site Request Forgery Vulnerability + Advisory URL: http://www.anatoliasecurity.com/adv/as-adv-2010-001.txt + Advisory ID: 2010-001 + Versions: Archiva 1...

Nucleus CMS 3.0.1 'myid' Parameter SQL Injection Weakness

No description provided by source. source: http://www.securityfocus.com/bid/27127/info Nucleus CMS is prone to an SQL-injection weakness because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Attackers can exploit this issue in conjunction with other...

PHP Captcha Security Images DoS Vulnerability

No description provided by source. Exploit Title: CaptchaSecurityImages.php Denial Of Service Author: cp77fk4r | empty0pageSHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: http://www.white-hat-web-design.co.uk/articles/php-captcha.php Denial Of Service OWASP: The Denial of Service DoS...