CVE-2007-0658: Drupal

Medium severity, CVSS 5.0. EPSS: 2.7% chance of exploitation in the next 30 days.

The (1) Textimage 4.7.x before 4.7-1.2 and 5.x before 5.x-1.1 module for Drupal and the (2) Captcha 4.7.x before 4.7-1.2 and 5.x before 5.x-1.1 module for Drupal allow remote attackers to bypass the CAPTCHA test via an empty captcha element in $_SESSION.

Affected products

• Drupal Drupal: version 4.7 only; version 4.7.1 only; version 4.7.2 only; version 4.7.3 only; version 4.7.4 only; version 4.7.5 only; …
• Drupal Textimage: version 4.7 only; version 5.0 only

Published 2007-02-01. Last modified 2026-06-16.