CVE-2006-0805 - CVE House
Back to Database
Status published High CVE-2006-0805

The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed...

Vulnerability Description

The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent (HTTP_USER_AGENT), which allows remote attackers to bypass CAPTCHA controls by fixing the User Agent, performing a valid challenge/response, then replaying that pair in the random_num and gfx_check parameters.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-0805

Credits & Attribution

No credits recorded in the NVD database.

References

More from francisco burzi

View All →
CVE-2008-0461
SQL injection vulnerability in index.php in the Search module in...
Medium 6.8
CVE-2007-6376
Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0...
High 7.5
CVE-2007-5032
Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi...
Medium 5.1
CVE-2007-1061
SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0...
Medium 6.8
CVE-2007-0372
Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow...
High 7.5

Affected Vendor

francisco burzi

View all reports →

Affected Software

php-nuke
Vulnerable Versions:
6.0, 6.5, 6.5_beta1, 6.5_final, 6.5_rc1, 6.5_rc2, 6.5_rc3, 6.6, 6.7, 6.9, 7.0, 7.0_final, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.7, 7.8, 7.9

Timeline

Official Publish: February 21st, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.