CVE-2013-4680: Undefined Security Weakness

Open redirect vulnerability in Maag Form Captcha extension 2.0.0 and earlier for TYPO3 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors...

PT-2013-5130

Name of the Vulnerable Software and Affected Versions Maag Form Captcha extension versions 2.0.0 and earlier for TYPO3 Description The issue allows remote attackers to redirect users to arbitrary web sites, potentially leading to phishing attacks. The attack vector is not specified. Recommendatio...

find_captchas

This plugin finds any CAPTCHA images that appear on a HTML document. The crawl is performed by requesting the document two times, and comparing the image hashes, if they differ, then they may be a CAPTCHA. Plugin type Crawl Options This plugin doesnt have any user configured options. Source For...

Security Bypass Vulnerability in extension powermail (powermail)

It has been discovered that the extension "powermail" powermail is susceptible to Security Bypass Vulnerability. Release Date: June 03, 2013 Component Type: Third party extension. This extension is not a part of the TYPO3 default installation. Affected Versions: Version 1.6.9 and below, 2.0.1 -...

ecshop绕过验证码暴利破解3

简要描述： 不用给分了，都不好意思要了（确实不是故意的，刚发现） rt 第一次的漏洞利用程序有个bug 但是因为有这个bug 导致了成功利用了发现的第三处漏洞 第二次漏洞也是并没有用到第二次所提到的漏洞，其实是本次的 好吧，有些绕口 简单了说就是 若本漏洞修复了，可以利用漏洞2 漏洞2修复了可以利用漏洞1 漏洞1影响范围更大一些 ------------------------------- 传送门 第一次http://wooyun.org/bugs/wooyun-2013-025053 第二次http://wooyun.org/bugs/wooyun-2013-025065 详细说明：...

ecshop绕过验证码暴利破解

简要描述： 应该流行的版本都存在此问题 详细说明： 若验证码不匹配，并没有销毁当前验证码 所以就可以一次请求验证码图片后，只要不再刷新验证码就可以一直使用 漏洞证明： 1.获取正确的验证码 2. $url, CURLOPTHEADER = false, CURLOPTTIMEOUT= 0.11, //CURLOPTFILE=$f, CURLOPTRETURNTRANSFER=true, CURLOPTREFERER=$referer, //CURLOPTPOST=1, CURLOPTHTTPHEADER=array'Content-Type:...

ecshop设计缺陷.会员账号可暴力破解

简要描述： 乌云上面很多都是爆破验证码..怎么没人发爆破账号密码的... 详细说明： 在www.ecshop.cn 做的测试 登陆口连个简单的验证码都没有设置...一些网站的管理后台也有没验证码.这样就可以爆破了.先拿会员账号做个测试... 漏洞证明： img src="https://images.seebug.org/upload/201305/3009142831689f1beb4c45937af23a32a3389e7a.jpg" alt="1.jpg" widt...

WordPress Securimage 3.2.4 Cross Site Scripting Vulnerability

WordPress Securimage plugin version 3.2.4 suffers from a cross site scripting vulnerability. Wordpress Securimage-WP Plugin v3.2.4 URI-based XSS Vulnerability Vendor: Securimage PHP CAPTCHA Product web page: https://wordpress.org/extend/plugins/securimage-wp/ Affected version: 3.2.4 Summary:...

CVE-2013-3535

Multiple cross-site scripting XSS vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 adminemail, 2 headertitle, 3 sitetitle parameter to admin/settings; 4 recaptchaprivate or 5 recaptchapublic parameter to admin/captchasettings; 6...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 adminemail, 2 headertitle, 3 sitetitle parameter to admin/settings; 4 recaptchaprivate or 5 recaptchapublic parameter to admin/captchasettings; 6...

PT-2013-4465

Name of the Vulnerable Software and Affected Versions CMSLogik versions 1.2.0 through 1.2.1 Description The issue allows remote attackers to inject arbitrary web script or HTML, potentially leading to cross-site scripting XSS attacks. This can be achieved through various parameters, including adm...

Wordpress Securimage-WP Plugin v3.2.4 URI-based XSS Vulnerability

Summary Securimage-WP adds powerful CAPTCHA protection to comment forms on posts and pages to help prevent comment spam from getting onto your site. Description Securimage-WP suffers from a XSS issue in 'siwptest.php' that uses the 'PHPSELF' variable. The vulnerability is present because there...

WordPress Securimage 3.2.4 Cross Site Scripting

Wordpress Securimage-WP Plugin v3.2.4 URI-based XSS Vulnerability Vendor: Securimage PHP CAPTCHA Product web page: https://wordpress.org/extend/plugins/securimage-wp/ Affected version: 3.2.4 Summary: Securimage-WP adds powerful CAPTCHA protection to comment forms on posts and pages to help preven...

Securimage 3.5 URI-based Cross-Site Scripting Vulnerability

Summary Securimage is an open-source free PHP CAPTCHA script for generating complex images and CAPTCHA codes to protect forms from spam and abuse. Description Securimage suffers from a XSS issue in 'exampleform.php' that uses the 'REQUESTURI' variable. The vulnerability is present because there...

Securimage 3.5 Cross Site Scripting

Securimage 3.5 URI-based Cross-Site Scripting Vulnerability Vendor: Securimage PHP CAPTCHA Product web page: http://www.phpcaptcha.org Affected version: 3.5 Summary: Securimage is an open-source free PHP CAPTCHA script for generating complex images and CAPTCHA codes to protect forms from spam and...

Discuz点触验证码插件验证绕过+密码明文传输

简要描述： 部分DZ论坛启用点触验证码后验证码完全没有起作用。同时由于更改了登录逻辑，还会造成论坛登录密码明文传输。 详细说明： 由于点触验证码插件的验证逻辑有问题，启用验证码之后可以简单绕过。同时由于更改了登录逻辑，会将DZ原本的md5传输的密文变成明文传输。 漏洞证明： 将红框中的display: none; 去掉，然后可以看到多了一个登录按钮。 这个按钮是没有启用验证逻辑的。直接输入用户名密码就可以登录。同时这样登录的话POST提交的是正常的md5加密后的密码。 但是如果输入验证码提交的话，POST数据就变成了： 其中可以看到明文的密码字段。...

WordPress IndiaNIC FAQs Manager Plugin 1.0 - Multiple Vulnerabilities

IndiaNIC FAQs Manager Plugin is prone to a CSRF and XSS vulnerabilities, also, the Captcha value can be read from captcha parameter hidden field. Solution Update the plugin...

WordPress Plugin IndiaNIC FAQs Manager 1.0 - Multiple Vulnerabilities

alert1 in question parameter. The Captcha value can be read from captcha parameter hidden field Part of Ask Question form =================== We don't need the captcha Image when we have this xD Request from Ask Question area XSS in question parameter POST /wordpress/wp-admin/admin-ajax.php...

Bo library network to any user of the password reset vulnerability, non-violent crack-vulnerability warning-the black bar safety net

Brief description: Bo library network-the most varieties of Chinese online bookstore, and the presence of any user of the password reset vulnerability, or non-mainstream. Don't burp suite, no violence, just gently change you can reset any user password. To predict the details, please see the...

MyBB < 1.6.9 Multiple Vulnerabilities

According to its version number, the MyBB install hosted on the remote web server is affected by multiple vulnerabilities : - A brute-force weakness exists in the CAPTCHA system due to an unspecified flaw. - A SQL injection vulnerability due to improper sanitization user-supplied input to the...