CVE-2008-3573 The CAPTCHA implementation in (1) Pligg 9.9.5 and possibly (2) Francisco Burzi PHP-Nuke 8.1 provides a critical random number (the ts_random value) within the URL in the SRC attribute of an IMG elemen...
MediumCVSS 5.0
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The CAPTCHA implementation in (1) Pligg 9.9.5 and possibly (2) Francisco Burzi PHP-Nuke 8.1 provides a critical random number (the ts_random value) within the URL in the SRC attribute of an IMG element, which allows remote attackers to pass the CAPTCHA test via a calculation that combines this value with the current date and the HTTP User-Agent string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| php-nuke | = 8.1 | No fix listed |
| pligg | = 9.9.5 | No fix listed |
References
- www.rooksecurity.com exploit
- 30518 exploit vdb-entry
- pligg-captcha-security-bypass(44192) vdb-entry