CVE-2026-50787

e-SIC Livre esiclivre v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/captcha.php. The application uses user-supplied parameters l, a, tf, ql without validation to generate CAPTCHA images, allowing remote attackers to cause denial of service via...

CVE-2026-50787

e-SIC Livre esiclivre v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/captcha.php. The application uses user-supplied parameters l, a, tf, ql without validation to generate CAPTCHA images, allowing remote attackers to cause denial of service via...

e-SIC Livre security vulnerability

Versions 0.2.2 and earlier of e-SIC Livre contain a security vulnerability. This vulnerability arises because the CAPTCHA image is generated without validating the user-supplied parameters l, a, tf, and ql in restrito/inc/captcha.php. As a result, remote attackers may cause a denial-of-service...

EUVD-2026-109108

e-SIC Livre esiclivre v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/captcha.php. The application uses user-supplied parameters l, a, tf, ql without validation to generate CAPTCHA images, allowing remote attackers to cause denial of service via...

CVE-2026-50787

The e-SIC Livre (esiclivre) application, versions v0.2.2 and earlier , is vulnerable to an uncontrolled resource consumption vulnerability in the restrito/inc/captcha.php component. The root cause is a lack of validation on the user-supplied GET parameters l (width), a (height), tf (font size), a...

CVE-2026-50787

e-SIC Livre esiclivre v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/captcha.php. The application uses user-supplied parameters l, a, tf, ql without validation to generate CAPTCHA images, allowing remote attackers to cause denial of service via...

CVE-2026-50787

e-SIC Livre esiclivre v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/captcha.php. The application uses user-supplied parameters l, a, tf, ql without validation to generate CAPTCHA images, allowing remote attackers to cause denial of service via...

CVE-2026-50787

e-SIC Livre esiclivre v0.2.2 and earlier contains an uncontrolled resource consumption vulnerability in restrito/inc/captcha.php. The application uses user-supplied parameters l, a, tf, ql without validation to generate CAPTCHA images, allowing remote attackers to cause denial of service via...

PT-2026-35116

Summary objects/getCaptcha.php accepts the CAPTCHA length ql directly from the query string with no clamping or sanitization, letting any unauthenticated client force the server to generate a 1-character CAPTCHA word. Combined with a case-insensitive strcasecmp comparison over a 33-character...

Improper Authentication

thorsten/phpmyfaq is vulnerable to Improper Authentication. The vulnerability is due to Captcha.php checking the captcha length incorrectly which allows an attacker to bypass captcha checks...

Conditional CAPTCHA 3.6 - wp-conditional-captcha.php Settings Page CSRF

The Conditional CAPTCHA WordPress plugin was affected by a wp-conditional-captcha.php Settings Page CSRF security vulnerability...

PT-2011-4607

Name of the Vulnerable Software and Affected Versions ClipBucket version 2.0.9 Description The issue allows remote attackers to obtain sensitive information via a direct request to a .php file. This is demonstrated by accessing certain files, such as plugins/signup captcha/signup captcha.php, whi...

CVE-2009-0678

images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array parameter value that does not correspond to a valid font file, which reveals the installation path in an error message...

CVE-2009-0678

CVE-2009-0678 affects RavenNuke 2.30. The vulnerability in images/captcha.php arises from an aFonts array parameter value that does not map to a valid font file, causing an error message that reveals the installation path. The NVD entry lists a base CVSSv2 score of 5.0 (Medium) with network attac...

CVE-2009-0678

images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array parameter value that does not correspond to a valid font file, which reveals the installation path in an error message...

CVE-2009-0678: Exposure of Sensitive Information to an Unauthorized Actor

images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array parameter value that does not correspond to a valid font file, which reveals the installation path in an error message...

CVE-2009-0674: Improper Control of Generation of Code

images/captcha.php in Raven Web Services RavenNuke 2.30, when registerglobals and displayerrors are enabled, allows remote attackers to determine the existence of local files by sending requests with full pathnames in the aFonts array parameter, and then observing the error messages, which differ...

CVE-2008-0206: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in captcha\captcha.php in the Captcha! 2.5d and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 captchattffolder, 2 captchanumchars, 3 captchattfrange, or 4 captchasecret parameter...

CVE-2007-4416: Undefined Security Weakness

captcha.php in BellaBook aka BellaBuffs allows remote attackers to obtain administrative privileges by sending the admin's username adminname in a pheaplogin cookie. NOTE: the vendor disputes this vulnerability because authentication data is derived from the adminpass and secret variables, in...

Advanced Poll 2.0.7 Remote File Include Vulnerability

Advanced Poll Advanced Poll 2.0.7 Remote File Include Vulnerability Found by: beks Bug in booth.php captcha.php comments.php png.php www.site.com/path/booth.php?includepath=shell www.site.com/path/captcha.php?includepath=shell www.site.com/path/comments.php?includepath=shell...