CVE-2008-4616

The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-supplied values to calculate a shared key...

Design/Logic Flaw

The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-supplied values to calculate a shared key...

CVE-2008-4616

The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-supplied values to calculate a shared key...

CVE-2008-4616

The CVE-2008-4616 entry concerns the SpamBam plugin for WordPress, where remote attackers can bypass restrictions and add blog comments by using server-supplied values to calculate a shared key. Connected sources confirm this is a design/logic flaw rather than a typical exploit chain. Impact is t...

CVE-2008-4616

The SpamBam plugin for WordPress allows remote attackers to bypass restrictions and add blog comments by using server-supplied values to calculate a shared key...

WordPress SpamBam Plugin - BYPASS

Because of this vulnerability, the attackers can bypass restrictions and add blog comments by using server-supplied values to calculate a shared key. Solution Update the plugin...

Exploiting the SpamBam plugin for wordpress

The attached exploit demonstrates that the WordPress SpamBam plugin can be bypassed due to relying on the client for security. Vulnerable software: SpamBam http://wordpress.org/extend/plugins/spambam/ by Gareth Heyes Vulnerability: No matter how hard you ofuscate or encrypt your code, never, unde...

Spambam <= 2.1 - Authorisation Bypass

There is no fix for this, as it's a design flaw. Plugin has been closed by WordPress...

WordPress Plugin SpamBam - Key Calculation Security Bypass

source: https://www.securityfocus.com/bid/27291/info SpamBam is prone to a security-bypass vulnerability because client-accessible data can be used to calculate verification keys. Attackers can exploit this issue to submit arbitrary form data via automated scripts and distribute spam...