Description
/admin/loginc.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code']) == 1, which leads to CAPTCHA bypass by emptying $_POST['captcha'].
Unscored
CVE-2017-9091
EUVD-2017-18030GHSA-44m6-j5rj-h6pv
/admin/loginc.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code']) == 1, which leads to CAPTCHA bypass by emptying $_…
Published May 19, 2017 · Updated Sep 16, 2024 · Assigned by mitre