DouPHP 1.2 /admin/login.php 验证码绕过漏洞

No description provided by source...

WordPress Booking Calendar Contact Form Plugin 1.0.2 - Multiple vulnerabilities

Booking Calendar Contact Form plugin is prone to multiple vulnerabilities: 1. Authenticated SQL injection in "get" parameter allows an attacker to escalate editor privileges. 2. Filter bypass & Authenticated SQL injection in "id" parameter via...

ThinkPHP 默认配置导致验证码暴力破解

简要描述： ThinkPHP 默认配置导致验证码暴力破解 详细说明： 最近用Thinkphp时发现，验证码类默认的check函数在检查完验证码是否正确后，并未重置session，导致可被暴力破解。 写这样的代码，再看看Verify类的check函数， public function check$code, $id = '' $key = $this-authcode$this-seKey.$id; // 验证码不能为空 $secode = session$key; ifempty$code || empty$secode return false; // session 过期...

UWA 2.2.1 /lib/ctrlr/Member/MemberCtrlr.class.php SQL注入漏洞

No description provided by source. 由于此漏洞需要验证码 不太好自动化 获取数据库名 membermodelid=1&memberid0=exp&memberid1=111,122,select database,1,1,1,1,1,1,1,1,1,1,1%23 获取表前缀 membermodelid=1&memberid0=exp&memberid1=111,122,select tablename from informationschema.tables where tableschema= 0xxxxxx limit...

Snapchat: Captcha Bypass in Snapchat's Geofilter Submission Process

Hi, Overview: Snapchat provides a form in which users can submit "Geofilters". These are filters which get applied to users snaps when they are in specific geolocations. The form https://www.snapchat.com/geofilters/submit.html allows for the submission of these "Geofilters" as an anonymous user...

WordPress Plugin BestWebSoft Google Captcha Security Bypass Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports the PHP and MySQL servers to set up a personal blog site.BestWebSoft Google Captcha also known as reCAPTCHA is one of the CAPTCHA authentication system plug-ins. A...

WordPress Plugin BestWebSoft Captcha Security Bypass Vulnerability

WordPress is the WordPress Software Foundation a set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL servers to set up a personal blog site.BestWebSoft Captcha is one of the website back-end CAPTCHA plugin. A security vulnerability exists in WordPress...

CVE-2015-0890

The BestWebSoft Google Captcha aka reCAPTCHA plugin before 1.13 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors...

CVE-2014-9283

The BestWebSoft Captcha plugin before 4.0.7 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors...

Design/Logic Flaw

The BestWebSoft Google Captcha aka reCAPTCHA plugin before 1.13 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors...

Design/Logic Flaw

The BestWebSoft Captcha plugin before 4.0.7 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors...

CVE-2015-0890

The CVE-2015-0890 issue affects the WordPress plugin “Google Captcha (reCAPTCHA)” by BestWebSoft, with vulnerable versions prior to 1.13 (notably 1.12 and earlier). It enables a CAPTCHA authentication bypass (CWE-254), allowing remote attackers to log in as an administrator via unspecified vector...

CVE-2014-9283

The BestWebSoft Captcha plugin before 4.0.7 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors...

CVE-2014-9283

The CVE-2014-9283 entry concerns the BestWebSoft Captcha plugin for WordPress, affected before version 4.0.7. A vulnerability allows remote attackers to bypass CAPTCHA protection and gain administrative access via unspecified vectors. Public references across CNVD/JVN/CVE records consistently des...

CVE-2015-0890

The BestWebSoft Google Captcha aka reCAPTCHA plugin before 1.13 for WordPress allows remote attackers to bypass the CAPTCHA protection mechanism and obtain administrative access via unspecified vectors...

Google Captcha (reCAPTCHA) by BestWebSoft vulnerable to CAPTCHA authentication bypass

Overview Google Captcha reCAPTCHA by BestWebSoft is a plugin for WordPress. Google Captcha reCAPTCHA by BestWebSoft contains a CAPTCHA authentication bypass vulnerability CWE-254. Impact If this vulnerability is exploited, an attacker may be able to successfully login to WordPress and access an...

BestWebSoft Captcha plugin vulnerable to CAPTCHA authentication bypass

Overview Captcha provided by BestWebSoft is a plugin for WordPress. Captcha contains a CAPTCHA authentication bypass vulnerability CWE-254. Impact If this vulnerability is exploited, an attacker may be able to successfully login to WordPress and access an administrative interface without...

JVN#93727681: BestWebSoft Captcha plugin vulnerable to CAPTCHA authentication bypass

Captcha provided by BestWebSoft is a plugin for WordPress. Captcha contains a CAPTCHA authentication bypass vulnerability CWE-254. Impact If this vulnerability is exploited, an attacker may be able to successfully login to WordPress and access an administrative interface without authentication...

Captcha <= 4.0.6 - Captcha Bypass

The captcha WordPress plugin was affected by a Captcha Bypass security vulnerability...

JVN#55063777: Google Captcha (reCAPTCHA) by BestWebSoft vulnerable to CAPTCHA authentication bypass

Google Captcha reCAPTCHA by BestWebSoft is a plugin for WordPress. Google Captcha reCAPTCHA by BestWebSoft contains a CAPTCHA authentication bypass vulnerability CWE-254. Impact If this vulnerability is exploited, an attacker may be able to successfully login to WordPress and access an...