CVE-2008-7216

EPSS 5.8%

Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/31029unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://docs.google.com/View?docid=df36cd52_19xzmkwqcg https://exchange.xforce.ibmcloud.com/vulnerabilities/39688 http://www.securityfocus.com/archive/1/486331/100/200/threaded http://www.securityfocus.com/bid/27287