Vulnerabilities > CVE-2006-0805 - Unspecified vulnerability in Francisco Burzi PHP-Nuke

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

francisco-burzi

exploit available

NVD

Published: 2006-02-21

Updated: 2024-11-21

Summary

The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent (HTTP_USER_AGENT), which allows remote attackers to bypass CAPTCHA controls by fixing the User Agent, performing a valid challenge/response, then replaying that pair in the random_num and gfx_check parameters.

Vulnerable Configurations

Part	Description	Count
Application	Francisco_Burzi Francisco Burzi PHP Nuke 6.5_Beta1 Francisco Burzi PHP Nuke 6.5 Francisco Burzi PHP Nuke 7.0 Francisco Burzi PHP Nuke 7.4 Francisco Burzi PHP Nuke 7.5 Francisco Burzi PHP Nuke 7.2 Francisco Burzi PHP Nuke 7.8 Francisco Burzi PHP Nuke 7.0_Final Francisco Burzi PHP Nuke 6.5_Rc2 Francisco Burzi PHP Nuke 7.3 Francisco Burzi PHP Nuke 6.5_Rc3 Francisco Burzi PHP Nuke 7.6 Francisco Burzi PHP Nuke 7.9 Francisco Burzi PHP Nuke 6.0 Francisco Burzi PHP Nuke 7.7 Francisco Burzi PHP Nuke 6.5_Final Francisco Burzi PHP Nuke 6.7 Francisco Burzi PHP Nuke 6.6 Francisco Burzi PHP Nuke 6.9 Francisco Burzi PHP Nuke 7.1 Francisco Burzi PHP Nuke 6.5_Rc1	21

Exploit-Db

description	PHPNuke 7.x CAPTCHA Bypass Weakness. CVE-2006-0805. Webapps exploit for php platform
id	EDB-ID:27249
last seen	2016-02-03
modified	2006-02-18
published	2006-02-18
reporter	waraxe
source	https://www.exploit-db.com/download/27249/
title	PHPNuke 7.x CAPTCHA Bypass Weakness

Summary

Vulnerable Configurations

Exploit-Db

References