Unscored CVE-2015-6250 EUVD-2015-6192GHSA-c5qm-hvv2-h2gp

simple-php-captcha before commit 9d65a945029c7be7bb6bc893759e74c5636be694 allows remote attackers to automatically generate the captcha res…

Published Sep 6, 2017 · Updated Aug 6, 2024 · Assigned by mitre

Description

simple-php-captcha before commit 9d65a945029c7be7bb6bc893759e74c5636be694 allows remote attackers to automatically generate the captcha response by running the same code on the client-side.

References

https://github.com/claviska/simple-php-captcha/issues/16
[oss-security] 20150817 Re: CVE request - simple-php-captcha - captcha bypass vulnerability mailing-list
https://github.com/claviska/simple-php-captcha/commit/9d65a945029c7be7bb6bc893759e74c5636be694