PT-2009-2683 · WordPress · Peter'S Math Anti-Spam Spinoff

Publicado 2009-09-11 · Atualizado 2018-10-11 · CVE-2008-7216

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Peter's Math Anti-Spam Spinoff plugin for WordPress (affected versions not specified)

Description The issue allows remote attackers to bypass CAPTCHA protection. This is possible because the plugin generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, enabling attackers to read certain bytes from the generated clip.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2008-7216

Produtos afetados

Peter'S Math Anti-Spam Spinoff

Referências · 6

• 🔥 http://securityfocus.com/bid/27287 · Exploit
• 🔥 https://exploit-db.com/exploits/31029 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/39688 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-7216 · Nota de Segurança
• http://securityfocus.com/archive/1/486331/100/200/threaded · Nota
• http://docs.google.com/View?docid=df36cd52_19xzmkwqcg · Nota