Skip to content
OpenAdvisories

Vendor

Drawing-Captcha

1 known vulnerabilities.

1 result · Clear filters · Feed

  • High 8.8

    Drawing-Captcha APP Host Header Injection in `/register` and `/confirm-email` Endpoints

    Drawing-Captcha APP provides interactive, engaging verification for Web-Based Applications. The vulnerability is a Host Header Injection in the /register and /confirm-email endpoints. It allows an attacker to manipulate the Host header in HTTP requests to gen…