High severity7.5NVD Advisory· Published May 19, 2017· Updated Jun 17, 2026
CVE-2017-9091
CVE-2017-9091
Description
/admin/loginc.php in Allen Disk 1.6 doesn't check if isset($_SESSION['captcha']['code']) == 1, which leads to CAPTCHA bypass by emptying $_POST['captcha'].
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- cpe:2.3:a:allen_disk_project:allen_disk:1.6:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
1- github.com/s3131212/allendisk/issues/23nvdIssue TrackingPatchThird Party Advisory
News mentions
0No linked articles in our index yet.