SA-CONTRIB-2010-050 - CAPTCHA - Cross Site Scripting

The CAPTCHA module enables a site administrator to put a CAPTCHA form element a simple challenge that is easy for humans, but hard for automated spam bots on any form. The CAPTCHA module does not sanitize the CAPTCHA description that is added as help text to the CAPTCHA form element, allowing use...

CVE-2010-1865

Multiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the IP address to the csgetip function in generate.php in the Captcha module, or 2 the semail parameter to the cssqlselect function in the MySQL database driver...

Sql injection

Multiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the IP address to the csgetip function in generate.php in the Captcha module, or 2 the semail parameter to the cssqlselect function in the MySQL database driver...

CVE-2010-1865

Multiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the IP address to the csgetip function in generate.php in the Captcha module, or 2 the semail parameter to the cssqlselect function in the MySQL database driver...

CVE-2010-1865: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in ClanSphere 2009.0.3 and earlier allow remote attackers to execute arbitrary SQL commands via 1 the IP address to the csgetip function in generate.php in the Captcha module, or 2 the semail parameter to the cssqlselect function in the MySQL database driver...

Jcaptcha vulnerability

Hi, Jcaptcha has a design problem that allows a complete bypass of it's security features. Vendor was contacted on 12/Dec/09: http://jcaptcha.octo.com/jira/browse/FWK-114 Other captcha systems could be affected. Kind Regards, --------------------- Hugo Vazquez Carames "El trabajo que nunca se...

Spammers Outsource CAPTCHA Decoding

Faced with stricter Internet security measures like CAPTCHAS, some spammers have begun borrowing a page from corporate America’s playbook: they are outsourcing. Read the full article. The New York Times...

Require user to answer CAPTCHA after three failed attempts

Require user to answer CAPTCHA after three failed attempts. For SOAP and XMLRPC this means that the user will have to open a browser to answer the CAPTCHA, similar to how google does it. This issue has been rated MODERATE. Please refer to http://confluence.atlassian.com/x/ZILmD for details on oth...

Require user to answer CAPTCHA after three failed attempts

Require user to answer CAPTCHA after three failed attempts. For SOAP and XMLRPC this means that the user will have to open a browser to answer the CAPTCHA, similar to how google does it. This issue has been rated MODERATE. Please refer to http://confluence.atlassian.com/x/ZILmD for details on oth...

The current CAPTCHA implementation may not be secure

The current CAPTCHA implementation displays a different message if the CAPTCHA is being displayed and the captcha is entered correctly but the password for the user is not, than if the CAPTCHA is entered incorrectly. This is giving away more information than a login screen should. The error messa...

The current CAPTCHA implementation may not be secure

The current CAPTCHA implementation displays a different message if the CAPTCHA is being displayed and the captcha is entered correctly but the password for the user is not, than if the CAPTCHA is entered incorrectly. This is giving away more information than a login screen should. The error messa...

The current CAPTCHA implementation may not be secure

The current CAPTCHA implementation displays a different message if the CAPTCHA is being displayed and the captcha is entered correctly but the password for the user is not, than if the CAPTCHA is entered incorrectly. This is giving away more information than a login screen should. The error messa...

Insufficient Anti-automation vulnerability in CB Captcha for Joomla and Mambo

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Anti-automation уязвимости в плагине CB Captcha plugcbcaptcha для компонента Community Builder comcomprofiler для Joomla и Mambo. Данный плагин базируется на скрипте капчи CaptchaSecurityImages.php и об уязвимостях в...

GUI MyBB 2002-2010 exploit

Exploit for php platform in category web applications ========================== GUI MyBB 2002-2010 exploit ========================== !/usr/local/bin/ruby GUI MyBB 2002-2010 04/04/10 Whivack Contact Me = email protected Dork Google : "Moteur MyBB, 2002-2010 MyBB Group." No Security : No Captcha...

MyBB 2002-2010 exploit

Exploit for php platform in category web applications ====================== MyBB 2002-2010 exploit ====================== !/usr/local/bin/ruby MyBB Owned 30/03/10 Ruby Code By, Whivack Gsk Win32 and Ruby Interpreter 1.8.6 Dork Google : "Moteur MyBB, 2002-2010 MyBB Group." Sensitive URL :...

The new cloud 4. 0 registered upload vulnerability-vulnerability warning-the black bar safety net

First download a serawebinfo Put the following configuration file is saved as xunyun. seraph url=http://localhost/users/upload. asp? action=save&ChannelID=1&sType= filefield=File1 filefield2= filename=2 0 0 9 8 1 6 2 3 5 5 4. cer;. gif filename2= local=C:\Documents and Settings\seraph\ 桌面 \1.jpg...

PHP Captcha Security Images DoS Vulnerability

Exploit for unknown platform in category web applications ============================================= PHP Captcha Security Images DoS Vulnerability ============================================= Exploit Title: CaptchaSecurityImages.php Denial Of Service Author: cp77fk4r Software Link:...

PHP Captcha Security Images - Denial of Service

PHP Captcha Security Images - Denial of Service Exploit Title: CaptchaSecurityImages.php Denial Of Service Author: cp77fk4r | empty0pageSHIFT+2gmail.com | www.DigitalWhisper.co.il Software Link: http://www.white-hat-web-design.co.uk/articles/php-captcha.php Denial Of Service OWASP: The Denial of...

CAPTCHA Option Should Exist for The Password Reset Form

The password reset prompt allows an individual to reset any user's password. My company uses a standard employee id to use for the JIRA username. With little knowledge, I designed a script that can cycle through employee id numbers and submit them to the reset password form. This process can repe...

CAPTCHA Option Should Exist for The Password Reset Form

panel:bgColor=e7f4fa NOTE: This suggestion is for JIRA Server. Using JIRA Cloud? See the corresponding suggestion|http://jira.atlassian.com/browse/JRACLOUD-20150. panel The password reset prompt allows an individual to reset any user's password. My company uses a standard employee id to use for t...