High severity7.5NVD Advisory· Published May 19, 2017· Updated May 13, 2026
CVE-2017-9090
CVE-2017-9090
Description
reg.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code'])==1, which makes it possible to bypass the CAPTCHA via an empty $_POST['captcha'].
Affected products
1- cpe:2.3:a:allen_disk_project:allen_disk:1.6:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/s3131212/allendisk/issues/25nvdIssue TrackingPatchThird Party Advisory
News mentions
0No linked articles in our index yet.