CVE-2017-9091 | BDVDB-2026-85616 Detail

Description#

/admin/loginc.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code']) == 1, which leads to CAPTCHA bypass by emptying $_POST['captcha'].

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/s3131212/allendisk/issues/23

Exploit#

No public exploit known

History#

Version 12017-05-19Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.