Drupal BOTCHA Module Information Disclosure Vulnerability
BID:61782
Info
Drupal BOTCHA Module Information Disclosure Vulnerability
| Bugtraq ID: | 61782 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 14 2013 12:00AM |
| Updated: | Aug 14 2013 12:00AM |
| Credit: | Rob Hess |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Drupal BOTCHA Module Information Disclosure Vulnerability
The BOTCHA module for Drupal is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.
The following are are vulnerable:
BOTCHA 7.x-1.x versions prior to 7.x-1.6
BOTCHA 7.x-2.x versions prior to 7.x-2.1
BOTCHA 7.x-3.x versions prior to 7.x-3.3
The BOTCHA module for Drupal is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.
The following are are vulnerable:
BOTCHA 7.x-1.x versions prior to 7.x-1.6
BOTCHA 7.x-2.x versions prior to 7.x-2.1
BOTCHA 7.x-3.x versions prior to 7.x-3.3
Exploit / POC
Drupal BOTCHA Module Information Disclosure Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
Drupal BOTCHA Module Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.