Lovasoa

An authentication bypass exists in the CAPTCHA Protected Page module, which allows site administrators to require CAPTCHA confirmation on specific pages. The module fails to sufficiently validate its CAPTCHA verification cookies, enabling an unauthenticated user or automated bot to forge the cookie and bypass the verification process entirely.

SQLpage is a SQL-only webapp builder. An attacker can retrieve database connection information from SQLpage and use it to connect to the database directly if the SQLpage instance is exposed publicly, the database connection string is specified in the `sqlpage/sqlpage.json` configuration file, the web root is the current working directory, and the database is exposed publicly.

A command injection issue existed in Web Inspector due to insufficient escaping. Copying a URL from Web Inspector may lead to command injection. This issue was addressed with improved escaping.

The issue is related to an inappropriate implementation in developer tools, allowing a remote attacker to obtain potentially sensitive information from disk via a crafted HTML page. This can happen if the attacker convinces the user to take certain actions in the developer tools. The exploitation of this issue may allow the attacker to access confidential data.

The issue is related to insufficient data validation in developer tools, allowing a remote attacker to execute arbitrary code via a crafted HTML page if the user is convinced to use devtools. This could potentially lead to access to confidential data, disruption of data integrity, and denial of service.