Vulnerabilities > CVE-2006-0805 - Unspecified vulnerability in Francisco Burzi PHP-Nuke
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent (HTTP_USER_AGENT), which allows remote attackers to bypass CAPTCHA controls by fixing the User Agent, performing a valid challenge/response, then replaying that pair in the random_num and gfx_check parameters.
Vulnerable Configurations
Exploit-Db
description | PHPNuke 7.x CAPTCHA Bypass Weakness. CVE-2006-0805. Webapps exploit for php platform |
id | EDB-ID:27249 |
last seen | 2016-02-03 |
modified | 2006-02-18 |
published | 2006-02-18 |
reporter | waraxe |
source | https://www.exploit-db.com/download/27249/ |
title | PHPNuke 7.x CAPTCHA Bypass Weakness |