High severity7.5NVD Advisory· Published May 19, 2017· Updated May 13, 2026
CVE-2017-9091
CVE-2017-9091
Description
/admin/loginc.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code']) == 1, which leads to CAPTCHA bypass by emptying $_POST['captcha'].
Affected products
1- cpe:2.3:a:allen_disk_project:allen_disk:1.6:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/s3131212/allendisk/issues/23nvdIssue TrackingPatchThird Party Advisory
News mentions
0No linked articles in our index yet.