SW:Rebellion NetworkHosted by the SW:Rebellion Network
Welcome to Evaders Squadron Coding [ESC]
We host quality Star Wars sites - inquire at The Star Wars Rebellion Network
Home Forums Nuke Patched Core Coding Services Webmaster Services Personal
  Login/Create an Account    

Forums
· Forums FAQ
· Search
· Usergroups
· Profile
· Private Messages

Support Us
This site runs with your support. Please donate:

User Info/Login
Welcome, Anonymous
Nickname
Password
Security Code: Security Code
Type Security Code

(Register)
Membership:
Latest: AndoRook
New Today: 0
New Yesterday: 0
Overall: 6768

People Online:
Visitors: 12
Members: 0
Total: 12

Link to Us

Affliates
RPG Boards Hosting

Evaders Squadron Coding [ESC] :: View topic - Security: MoBiC-10: PHP-Nuke CAPTCHA bypass
Security: MoBiC-10: PHP-Nuke CAPTCHA bypass

 
Post new topic   Reply to topic    Evaders Squadron Coding [ESC] Forum Index -> Coding Services
View previous topic :: View next topic  
Author Message
Evaders99



Joined: Jan 11, 2002
Posts: 3049
Location: USA

PostPosted: Fri Jan 04, 2008 4:09 am    Post subject: Security: MoBiC-10: PHP-Nuke CAPTCHA bypass Reply with quote

In response to
http://websecurity.com.ua/1527/
http://websecurity.com.ua/category/mobic/page/4/

This is not a new issue. phpNuke CAPCHTA is weak. There is no particularly immediate threat for hackers to exploit, but spammers could use it create many accounts.

A simple way to register multiple users if you've already gotten one image/confirmation code. Since the confirmation codes are dependent on the month & day, one code can be used for 24 hours.

A solution is the CAPCHTA used in RavenNuke. This group has not tested its effectiveness yet, but its better than anything else right now.
http://www.ravenphpscripts.com
_________________
Evaders99
SW:Rebellion Fans! Webmaster
Star Wars roleplaying community! Administrator

Fighting is terrible, but not as terrible as losing the will to fight.
- SW:Rebellion Network - Evaders Squadron Coding -

The cake is a lie.
Back to top
View user's profile Send private message Visit poster's website AIM Address Yahoo Messenger
Display posts from previous:   
Post new topic   Reply to topic    Evaders Squadron Coding [ESC] Forum Index -> Coding Services All times are GMT - 5 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


Powered by phpBB © 2001, 2005 phpBB Group

^Top
Home Your Account Forums Downloads F.A.Q. Submit News Hosting Contact Us

© 2005 - 2007 by Evaders99. All Rights Reserved.
All logos and trademarks in this site are property of their respective owner.
The comments are property of their posters.
You can syndicate our news using the file backend.php
PHP-Nuke Copyright © 2005 by Francisco Burzi. This is free software, and you may redistribute it under the GPL.
PHP-Nuke comes with absolutely no warranty, for details, see the license.
Page Generation: 0.40 Seconds