2081 matches found
CVE-2014-6288
The TYPO3 powermail extension (component: powermail, TYPO3 ecosystem) is affected in versions 2.0.0 through 2.0.10. The root cause is a CAPTCHA bypass vulnerability that allows remote attackers to bypass CAPTCHA protection via unspecified vectors, enabling form submissions without proper captcha ...
CVE-2014-6288
The powermail extension 2.x before 2.0.11 for TYPO3 allows remote attackers to bypass the CAPTCHA protection mechanism via unspecified vectors...
Drupal Mollom Module Cross-Site Scripting Patch
Drupal today released an update that patches a cross-site scripting vulnerability in a popular spam and content moderation module used by websites built on the open source CMS. The vulnerability was in a feature of the Mollom module that is installed on at least 60,000 sites, said Drupal security...
XSScrapy - Fast, thorough XSS vulnerability spider
Fast, thorough, XSS spider. Give it a URL and it'll test every link it finds for cross-site scripting vulnerabilities. XSS attack vectors xsscrapy will test Referer header way more common than I thought it would be! User-Agent header Cookie header added 8/24/14 Forms, both hidden and explicit URL...
ESPCMS 全版验证码破解验证码等于虚设（可导致爆破等附解密exp）
简要描述： ESPCMS 全版！验证码破解！验证码等于虚设（可导致爆破等） 详细说明： 先看验证码生成的方法！只是生成了一个6位随机数 然后加密保存到cookie中！关键点在于加密函数eccode 竟然采用的是默认的key $fun = new functioninc; $seccode = rand100000, 999999; $secode = $fun-accept'secode', 'R'; if $secode == 'ecispseccode' $secodename = 'ecispseccode'; else $secodename =...
Discuz! 多数版本可被暴力破解，包括UCenter
简要描述： Discuz! 多数版本均可被暴力破解，包括UCcenter，我只测试了几个例子，有些深入的工作没有做。若是要写个全自动化的工具，还得多花点心思。 : 详细说明： 很简单的问题，Discuz取不到用户的真实IP，可以被X-Forwarded-For头和Client-IP头绕过，伪造欺骗源IP。导致攻击者可以无限次数发起登录请求。 以锤子手机的论坛为例： Discuz! X3。 找到ID为1的管理员用户是webmaster： http://bbs.smartisan.cn/home.php?mod=space&uid=1 锤子论坛没有验证码，胡乱输入错误5次，提示错误次数过多：...
WordPress SI CAPTCHA Anti-Spam Plugin Cross Site Scripting Vulnerability
WordPress SI CAPTCHA Anti-Spam Plugin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
CVE-2014-5190
Cross-site scripting XSS vulnerability in captcha-secureimage/test/index.php in the SI CAPTCHA Anti-Spam plugin 2.7.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
Cross site scripting
Cross-site scripting XSS vulnerability in captcha-secureimage/test/index.php in the SI CAPTCHA Anti-Spam plugin 2.7.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
CVE-2014-5190
The CVE-2014-5190 entry concerns the WordPress plugin SI CAPTCHA Anti-Spam (v2.7.4). The connected documents confirm a Cross-Site Scripting (XSS) vulnerability in captcha-secureimage/test/index.php that allows remote attackers to inject arbitrary web script or HTML via PATH_INFO. The practical im...
CVE-2014-5190
Cross-site scripting XSS vulnerability in captcha-secureimage/test/index.php in the SI CAPTCHA Anti-Spam plugin 2.7.4 for WordPress allows remote attackers to inject arbitrary web script or HTML via the PATHINFO...
WordPress SI CAPTCHA Plugin <= 2.7.4 - XSS
Because of this vulnerability in captcha-secureimage/test/index.php, the attackers can inject arbitrary web script or HTML via the PATHINFO. Solution Update the plugin...
WordPress SI CAPTCHA Cross Site Scripting
|||||||||||||||||||||||||||||||||||||||||||||||||| |-------------------------------------------------------------------------| | Exploit Title: Wordpress SI CAPTCHA Anti-Spam Plugin Cross site scripting | | Exploit Author: Ashiyane Digital Security Team | | Date : Date: 2014-08-02 | | Vendor...
Captcha 2.12-3.8.1 - Captcha Bypass
The captcha WordPress plugin was affected by a Captcha Bypass security vulnerability...
Contact Form 7 <= 3.7.1 - CAPTCHA Bypass
The Contact Form 7 WordPress plugin was affected by a CAPTCHA Bypass security vulnerability...
IndiaNIC FAQs Manager 1.0 - CAPTCHA Value Disclosure
The faqs-manager WordPress plugin was affected by a CAPTCHA Value Disclosure security vulnerability...
SolveMedia 1.1.0 - plugins.php API Key Manipulation CSRF
The Solve Media CAPTCHA WordPress plugin was affected by a plugins.php API Key Manipulation CSRF security vulnerability...
SolveMedia 1.1.0 - solvemedia.admin.inc Admin Options Page CSRF
The Solve Media CAPTCHA WordPress plugin was affected by a solvemedia.admin.inc Admin Options Page CSRF security vulnerability...