CVE-2017-9091

The CVE-2017-9091 entry concerns Allen Disk 1.6: /admin/loginc.php does not verify isset($_SESSION['captcha']['code']) before processing, enabling CAPTCHA bypass by clearing $_POST['captcha']. The Red Hat and NVD records confirm the same issue; no public exploit details or patches are described i...