Remote Code Execution in simple-php-captcha

Remote Code Execution in simple-php-captcha

CVE-2015-6250 · MEDIUM Severity

AV:N/AC:L/AU:N/C:P/I:N/A:N

simple-php-captcha before commit 9d65a945029c7be7bb6bc893759e74c5636be694 allows remote attackers to automatically generate the captcha response by running the same code on the client-side.

Learn more about our Web Application Penetration Testing UK.