CVE-2008-7216 Peter's Math Anti-Spam Spinoff < 1.0.0 - CAPTCHA Bypass
MediumCVSS 4.3
EPSS 5.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wordpress peters math anti-spam for wordpress | All versions | No fix listed |
| wordpress peters-math-anti-spam(WordPress) | < 1.0.0 | 1.0.0 |
References
- docs.google.com
- 20080115 Defeating audio captcha systems mailing-list
- 27287 exploit vdb-entry
- mathantispam-captcha-security-bypass(39688) vdb-entry
- Wordfence Intelligence third-party-advisory
- www.cve.org