High severity7.5NVD Advisory· Published May 19, 2017· Updated Jun 17, 2026
CVE-2017-9090
CVE-2017-9090
Description
reg.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code'])==1, which makes it possible to bypass the CAPTCHA via an empty $_POST['captcha'].
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- cpe:2.3:a:allen_disk_project:allen_disk:1.6:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- github.com/s3131212/allendisk/issues/25nvdIssue TrackingPatchThird Party Advisory
News mentions
0No linked articles in our index yet.