CVE-2017-9091

/admin/loginc.php in Allen Disk 1.6 doesn't check if isset$SESSION'captcha''code' == 1, which leads to CAPTCHA bypass by emptying $POST'captcha'...

CVE-2017-9091

The CVE-2017-9091 entry concerns Allen Disk 1.6: /admin/loginc.php does not verify isset($_SESSION['captcha']['code']) before processing, enabling CAPTCHA bypass by clearing $_POST['captcha']. The Red Hat and NVD records confirm the same issue; no public exploit details or patches are described i...

PT-2017-18695

Name of the Vulnerable Software and Affected Versions Allen Disk version 1.6 Description The issue concerns a CAPTCHA bypass in the login functionality. Specifically, the /admin/loginc.php endpoint does not properly check if the CAPTCHA code has been set, allowing for bypass by emptying the captc...

CVE-2017-9091: Improper Input Validation

/admin/loginc.php in Allen Disk 1.6 doesn't check if isset$SESSION'captcha''code' == 1, which leads to CAPTCHA bypass by emptying $POST'captcha'...