Description
reg.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code'])==1, which makes it possible to bypass the CAPTCHA via an empty $_POST['captcha'].
Unscored
CVE-2017-9090
EUVD-2017-18029GHSA-fhph-5g4h-87mq
reg.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code'])==1, which makes it possible to bypass the CAPTCHA via an emp…
Published May 19, 2017 · Updated Sep 16, 2024 · Assigned by mitre