PT-2026-35116

Summary objects/getCaptcha.php accepts the CAPTCHA length ql directly from the query string with no clamping or sanitization, letting any unauthenticated client force the server to generate a 1-character CAPTCHA word. Combined with a case-insensitive strcasecmp comparison over a 33-character...

Improper Authentication

thorsten/phpmyfaq is vulnerable to Improper Authentication. The vulnerability is due to Captcha.php checking the captcha length incorrectly which allows an attacker to bypass captcha checks...

Conditional CAPTCHA 3.6 - wp-conditional-captcha.php Settings Page CSRF

The Conditional CAPTCHA WordPress plugin was affected by a wp-conditional-captcha.php Settings Page CSRF security vulnerability...

PT-2011-4607

Name of the Vulnerable Software and Affected Versions ClipBucket version 2.0.9 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by accessing certain files, such as plugins/signup captcha/signup captcha.php, whi...

CVE-2009-0678

images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array parameter value that does not correspond to a valid font file, which reveals the installation path in an error message...

CVE-2009-0678

CVE-2009-0678 affects RavenNuke 2.30. The vulnerability in images/captcha.php arises from an aFonts array parameter value that does not map to a valid font file, causing an error message that reveals the installation path. The NVD entry lists a base CVSSv2 score of 5.0 (Medium) with network attac...

CVE-2009-0678

images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array parameter value that does not correspond to a valid font file, which reveals the installation path in an error message...

CVE-2009-0674: Improper Control of Generation of Code

images/captcha.php in Raven Web Services RavenNuke 2.30, when registerglobals and displayerrors are enabled, allows remote attackers to determine the existence of local files by sending requests with full pathnames in the aFonts array parameter, and then observing the error messages, which differ...

CVE-2009-0678: Exposure of Sensitive Information to an Unauthorized Actor

images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array parameter value that does not correspond to a valid font file, which reveals the installation path in an error message...

CVE-2008-0206: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in captcha\captcha.php in the Captcha! 2.5d and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 captchattffolder, 2 captchanumchars, 3 captchattfrange, or 4 captchasecret parameter...

CVE-2007-4416: Undefined Security Weakness

captcha.php in BellaBook aka BellaBuffs allows remote attackers to obtain administrative privileges by sending the admin's username adminname in a pheaplogin cookie. NOTE: the vendor disputes this vulnerability because authentication data is derived from the adminpass and secret variables, in...

Advanced Poll 2.0.7 Remote File Include Vulnerability

Advanced Poll Advanced Poll 2.0.7 Remote File Include Vulnerability Found by: beks Bug in booth.php captcha.php comments.php png.php www.site.com/path/booth.php?includepath=shell www.site.com/path/captcha.php?includepath=shell www.site.com/path/comments.php?includepath=shell...

CVE-2005-4163

Directory traversal vulnerability in captcha.php in Captcha PHP 0.9 allows remote attackers to read arbitrary files via the tcf parameter...

CVE-2005-4163: Undefined Security Weakness

Directory traversal vulnerability in captcha.php in Captcha PHP 0.9 allows remote attackers to read arbitrary files via the tcf parameter...