Description

The (1) Textimage 4.7.x before 4.7-1.2 and 5.x before 5.x-1.1 module for Drupal and the (2) Captcha 4.7.x before 4.7-1.2 and 5.x before 5.x-1.1 module for Drupal allow remote attackers to bypass the CAPTCHA test via an empty captcha element in $_SESSION.

Remediation

References

CVE-2007-0658

Related Vulnerabilities

Drupal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-4369)

Oracle HTTP Server CVE-2007-0280 Vulnerability (CVE-2007-0280)

Vanilla Forums Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2014-9685)

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2014-7848)

WordPress Plugin Complete Gallery Manager for WordPress Arbitrary File Upload (3.3.3)

Severity

Medium

Classification

CVE-2007-0658

Tags

Missing Update Known Vulnerabilities