CVE-2006-2918: Lanap Botdetect Captcha ASP.NET

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

The Lanap BotDetect APS.NET CAPTCHA component before 1.5.4.0 stores the UUID and hash for a CAPTCHA in the ViewState of a page, which makes it easier for remote attackers to conduct automated attacks by "replaying the ViewState for a known number."

Affected products

• Lanap Botdetect Captcha ASP.NET: any version

Published 2006-06-23. Last modified 2026-09-23.