admin/config.php in Evilsentinel 1.0.9 and earlier allows remote attackers to bypass the CAPTCHA test by omitting the es_security_captcha parameter and not invoking captcha.php.
References
Configurations
Information
Published : 2008-01-17 16:00
Updated : 2017-09-28 18:30
NVD link : CVE-2008-0351
Mitre link : CVE-2008-0351
JSON object : View
CWE
CWE-287
Improper Authentication
Products Affected
evilsentinel
- evilsentinel