docs.google.com
http://docs.google.com/View?docid=df36cd52_19xzmkwqcg CVE-2008-7216
WordPress Plugin Peter's Math Anti-Spam 0.1.6 - Audio CAPTCHA Security Bypass
Record summary
CVE-2008-7216 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBWordPress Plugin Peter's Math Anti-Spam 0.1.6 - Audio CAPTCHA Security BypassExploitDB exploitby RomeroNot analyzed1 file
References
520080115 Defeating audio captcha systemsmailing list
http://www.securityfocus.com/archive/1/486331/100/200/threaded 27287vdb entry
http://www.securityfocus.com/bid/27287 mathantispam-captcha-security-bypass(39688)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/39688 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-7216