Fuctweb CapCC Plugin for WordPress CAPTCHA Security Bypass Vulnerability

Bugtraq ID:	37103
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Dec 13 2008 12:00AM
Updated:	Nov 23 2009 10:45PM
Credit:	MustLive
Vulnerable:	Fuctweb CapCC 1.0
Not Vulnerable:

Fuctweb CapCC Plugin for WordPress CAPTCHA Security Bypass Vulnerability

Fuctweb CapCC Plugin for WordPress is prone to a security-bypass vulnerability that occurs in the audio CAPTCHA protocol.

Successful exploits may allow attackers to bypass security restrictions and perform unauthorized actions.

CapCC 1.0 is affected; other versions may also be vulnerable.

Fuctweb CapCC Plugin for WordPress CAPTCHA Security Bypass Vulnerability

Attackers can use a browser to exploit this issue.

The following example code is available:

• /data/vulnerabilities/exploits/37103.html

Fuctweb CapCC Plugin for WordPress CAPTCHA Security Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Fuctweb CapCC Plugin for WordPress CAPTCHA Security Bypass Vulnerability

References:

• CapCC Homepage (Fuctweb)
  
• Vulnerabilities in CapCC plugin for WordPress (Websecurity)
  
• Wordpress church_admin Plugin "id" Cross-Site Scripting Vulnerability (Sammy Forgit)
  
• Vulnerabilities in plugins for WordPress ('MustLive' )