cbcvebase.
CVE-2006-0805
published 2006-02-21

CVE-2006-0805: The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent…

PriorityP339high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
2.93%
85.3th percentile
The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent (HTTP_USER_AGENT), which allows remote attackers to bypass CAPTCHA controls by fixing the User Agent, performing a valid challenge/response, then replaying that pair in the random_num and gfx_check parameters.

Affected

21 ranges
VendorProductVersion rangeFixed in
francisco_burziphp-nuke——
francisco_burziphp-nuke——
francisco_burziphp-nuke——
francisco_burziphp-nuke——
francisco_burziphp-nuke——
francisco_burziphp-nuke——
francisco_burziphp-nuke——
francisco_burziphp-nuke——
francisco_burziphp-nuke——
francisco_burziphp-nuke——
francisco_burziphp-nuke——
francisco_burziphp-nuke——
francisco_burziphp-nuke——
francisco_burziphp-nuke——
francisco_burziphp-nuke——
francisco_burziphp-nuke——
francisco_burziphp-nuke——
francisco_burziphp-nuke——
francisco_burziphp-nuke——
francisco_burziphp-nuke——
francisco_burziphp-nuke——
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.