2563 matches found
SMF 1.1.4 - Audio CAPTCHA Security Bypass
source: https://www.securityfocus.com/bid/28866/info SMF Simple Machine Forum is prone to a security-bypass vulnerability that occurs in the audio CAPTCHA protocol. Successfully exploiting this issue may allow attackers to send unsolicited spam or perform other automated attacks...
ShopEx PHP remote include vulnerability-vulnerability warning-the black bar safety net
Article author: lonely hacker Source of information: Affects versions: 4.7 and below verifycode.php ? php / Login verification code generating file @package ShopEx online store system @version 4.6 @author ShopEx. cn [email protected] @url @since PHP 4.3 @copyright ShopEx. cn / if ! defined"ISSHOP...
XSS vulnerabilities in create/edit/copy page and blogpost actions
The following create/edit page URL's are vulnerable: - /pages/createpage.action - /pages/docreatepage.action - /pages/editpage.action - /pages/doeditepage.action on parentPageString, mode, labelsString, captchaId The following create/edit blogpost URL's are vulnerable: -...
Authentication flaw
admin/config.php in Evilsentinel 1.0.9 and earlier allows remote attackers to bypass the CAPTCHA test by omitting the essecuritycaptcha parameter and not invoking captcha.php...
CVE-2008-0351
admin/config.php in Evilsentinel 1.0.9 and earlier allows remote attackers to bypass the CAPTCHA test by omitting the essecuritycaptcha parameter and not invoking captcha.php...
CVE-2008-0351
admin/config.php in Evilsentinel 1.0.9 and earlier allows remote attackers to bypass the CAPTCHA test by omitting the essecuritycaptcha parameter and not invoking captcha.php...
CVE-2008-0351
CVE-2008-0351 affects Evilsentinel
CVE-2008-0351: Improper Authentication
admin/config.php in Evilsentinel 1.0.9 and earlier allows remote attackers to bypass the CAPTCHA test by omitting the essecuritycaptcha parameter and not invoking captcha.php...
Defeating audio captcha systems
Hi all, Some days ago I wrote an advisory which demonstrates how the Peter's Math Antispam Spinoff plugin for wordpress http://www.theblog.ca/math-anti-spam can be defeated by its audio file. It's hard to summarize, you better read the advisory, but in a very small nutshell, the flaw its about no...
WordPress Plugin Peters Math Anti-Spam 0.1.6 - Audio CAPTCHA Security Bypass
WordPress Plugin Peters Math Anti-Spam 0.1.6 - Audio CAPTCHA Security Bypass source: https://www.securityfocus.com/bid/27287/info Peter's Math Anti-Spam for WordPress is prone to a security-bypass vulnerability. This issue occurs when presenting a visitor with challenge data to determine if they...
WordPress Plugin Peter's Math Anti-Spam 0.1.6 - Audio CAPTCHA Security Bypass
source: https://www.securityfocus.com/bid/27287/info Peter's Math Anti-Spam for WordPress is prone to a security-bypass vulnerability. This issue occurs when presenting a visitor with challenge data to determine if they are a legitimate user or an automaton. The challenge data is poorly obfuscate...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in captcha\captcha.php in the Captcha! 2.5d and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 captchattffolder, 2 captchanumchars, 3 captchattfrange, or 4 captchasecret parameter...
CVE-2008-0206
Multiple cross-site scripting XSS vulnerabilities in captcha\captcha.php in the Captcha! 2.5d and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 captchattffolder, 2 captchanumchars, 3 captchattfrange, or 4 captchasecret parameter...
evilsentinel-disable.txt
!/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love '; if $argc / errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; functi...
CVE-2008-0206
Multiple cross-site scripting XSS vulnerabilities in captcha\captcha.php in the Captcha! 2.5d and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 captchattffolder, 2 captchanumchars, 3 captchattfrange, or 4 captchasecret parameter...
CVE-2008-0206
CVE-2008-0206 affects the WordPress Captcha plugin (Captcha! 2.5d and earlier). It describes multiple XSS vulnerabilities in captcha.php, exploitable via the parameters: captcha_ttffolder, captcha_numchars, captcha_ttfrange, and captcha_secret. Remote attackers could inject arbitrary web script o...
Evilsentinel <= 1.0.9 (multiple vulnerabilities) Disable Exploit
Exploit for unknown platform in category web applications ================================================================ Evilsentinel = 1.0.9 multiple vulnerabilities Disable Exploit ================================================================ !/usr/bin/php -q -d shortopentag=on ? echo '...
Evilsentinel <= 1.0.9 (multiple vulnerabilities) Disable Exploit
No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo ' Evilsentinel = 1.0.9 Disable Exploit by BlackHawk [email protected] http://itablackhawk.altervista.org Thanks to rgod for the php code and Marty for the Love '; if $argc3 echo "Usage: php ".$argv0." Host Path newma...
Evilsentinel 1.0.9 - Multiple Vulnerabilities Disable
Evilsentinel 1.0.9 - Multiple Vulnerabilities Disable !/usr/bin/php -q -d shortopentag=on Thanks to rgod for the php code and Marty for the Love '; if $argc / errorreporting0; iniset"maxexecutiontime",0; iniset"defaultsockettimeout",5; function quickdump$string $re...
CVE-2008-0206: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in captcha\captcha.php in the Captcha! 2.5d and earlier plugin for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 captchattffolder, 2 captchanumchars, 3 captchattfrange, or 4 captchasecret parameter...