CVE-2007-0658

The (1) Textimage 4.7.x before 4.7-1.2 and 5.x before 5.x-1.1 module for Drupal and the (2) Captcha 4.7.x before 4.7-1.2 and 5.x before 5.x-1.1 module for Drupal allow remote attackers to bypass the CAPTCHA test via an empty captcha element in $_SESSION.

🔗 References (24)

• cve@mitrehttp://cvs.drupal.org/viewcvs/drupal/contributions/modules/captcha/captcha.module?r1=1.25.2.1&r2=1.25.2.2
• cve@mitrehttp://cvs.drupal.org/viewcvs/drupal/contributions/modules/textimage/captcha.inc?r1=1.1&r2=1.1.2.1
• cve@mitrehttp://drupal.org/node/114364
• cve@mitrehttp://drupal.org/node/114519
• cve@mitrehttp://osvdb.org/32137
• cve@mitrehttp://osvdb.org/32138
• cve@mitrehttp://secunia.com/advisories/23983
• cve@mitrehttp://secunia.com/advisories/23985
• cve@mitrehttp://www.securityfocus.com/bid/22329
• cve@mitrehttp://www.vupen.com/english/advisories/2007/0431
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/31984
• cve@mitrehttps://exchange.xforce.ibmcloud.com/vulnerabilities/31994
• af854a3a-2127-422b-91ae-364da2661108http://cvs.drupal.org/viewcvs/drupal/contributions/modules/captcha/captcha.module?r1=1.25.2.1&r2=1.25.2.2
• af854a3a-2127-422b-91ae-364da2661108http://cvs.drupal.org/viewcvs/drupal/contributions/modules/textimage/captcha.inc?r1=1.1&r2=1.1.2.1
• af854a3a-2127-422b-91ae-364da2661108http://drupal.org/node/114364