CVE-2008-2020

First published: Wed Apr 30 2008(Updated: )

The CAPTCHA implementation as used in (1) Francisco Burzi PHP-Nuke 7.0 and 8.1, (2) my123tkShop e-Commerce-Suite (aka 123tkShop) 0.9.1, (3) phpMyBitTorrent 1.2.2, (4) TorrentFlux 2.3, (5) e107 0.7.11, (6) WebZE 0.5.9, (7) Open Media Collectors Database (aka OpenDb) 1.5.0b4, and (8) Labgab 1.1 uses a code_bg.jpg background image and the PHP ImageString function in a way that produces an insufficient number of different images, which allows remote attackers to pass the CAPTCHA test via an automated attack using a table of all possible image checksums and their corresponding digit strings.

Credit: cve@mitre.org cve@mitre.org

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

• collector/nvd-historical
• collector/nvd-index
• agent/type
• collector/nvd-api
• source/NVD
• agent/software-canonical-lookup
• agent/last-modified-date
• agent/weakness
• agent/references
• agent/severity
• agent/author
• agent/description
• agent/first-publish-date
• agent/softwarecombine
• agent/tags
• agent/event
• collector/mitre-cve
• source/MITRE
• vendor/my123tkshop
• canonical/my123tkshop e-commerce-suite
• version/my123tkshop e-commerce-suite/0.9.1
• vendor/phpmybittorrent
• canonical/phpmybittorrent phpmybittorrent
• version/phpmybittorrent phpmybittorrent/1.2.2
• vendor/webze
• canonical/webze webze
• version/webze webze/0.5.9
• vendor/torrentflux
• canonical/torrentflux torrentflux
• version/torrentflux torrentflux/2.3
• vendor/e107
• canonical/e107 e107
• version/e107 e107/0.7.11
• vendor/php-nuke
• canonical/php-nuke php-nuke
• version/php-nuke php-nuke/8.1
• vendor/labgab
• canonical/labgab labgab
• version/labgab labgab/1.1
• vendor/opendb
• canonical/opendb opendb
• version/opendb opendb/1.5.0b4
• vendor/phpnuke
• canonical/phpnuke php-nuke
• version/phpnuke php-nuke/7.0
• version/opendb opendb/1.5.0-beta4
• version/phpnuke php-nuke/8.1
• vendor/torrentflux project
• canonical/torrentflux project torrentflux
• version/torrentflux project torrentflux/2.3