5

CVE-2007-0658

The (1) Textimage 4.7.x before 4.7-1.2 and 5.x before 5.x-1.1 module for Drupal and the (2) Captcha 4.7.x before 4.7-1.2 and 5.x before 5.x-1.1 module for Drupal allow remote attackers to bypass the CAPTCHA test via an empty captcha element in $_SESSION.

Data is provided by the National Vulnerability Database (NVD)
DrupalDrupal Version4.7
DrupalDrupal Version4.7.1
DrupalDrupal Version4.7.2
DrupalDrupal Version4.7.3
DrupalDrupal Version4.7.4
DrupalDrupal Version4.7.5
DrupalDrupal Version4.7.6
DrupalDrupal Version4.7_rev1.15
DrupalDrupal Version5.0
DrupalDrupal Version5.1
DrupalTextimage Version4.7
DrupalTextimage Version5.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.91% 0.752
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:P/A:N