4.3med
CVE-2008-72161 exploit
Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additiona…
Published 17 y ago · modified 4 mo ago · JSON
CVSS
4.3
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
5.8%
percentile 93%
Public exploits
1
Exploit-DB
Summary
Peter's Math Anti-Spam Spinoff plugin for WordPress generates audio CAPTCHA clips by concatenating static audio files without any additional distortion, which allows remote attackers to bypass CAPTCHA protection by reading certain bytes from the generated clip.
Exploit prediction (EPSS)
5.85% probability of exploitation in the next 30 days, higher than 93% of all scored CVEs.
Exploits and detections
- EDB-31029 WordPress Plugin Peter's Math Anti-Spam 0.1.6 - Audio CAPTCHA Security Bypass · webapps · 2008-01-15
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 4.3 | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Classification
- Weakness
- CWE-264 Permissions, Privileges, and Access Controls
References
- exchange.xforce.ibmcloud.com /vulnerabilities/39688 · vdb-entry, x_refsource_XF, x_transferred
- securityfocus.com /bid/27287 · vdb-entry, x_refsource_BID, x_transferred
- securityfocus.com /archive/1/486331/100/200/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
- docs.google.com /View?docid=df36cd52_19xzmkwqcg · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2008-7216
- NVD: CVE-2008-7216
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.