CVE-2017-9090 | BDVDB-2026-85615 Detail

Description#

reg.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code'])==1, which makes it possible to bypass the CAPTCHA via an empty $_POST['captcha'].

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/s3131212/allendisk/issues/25

Exploit#

No public exploit known

History#

Version 12017-05-19Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.