CVE-2008-0351: Evilsentinel

Medium severity, CVSS 5.0. EPSS: 2.3% chance of exploitation in the next 30 days.

admin/config.php in Evilsentinel 1.0.9 and earlier allows remote attackers to bypass the CAPTCHA test by omitting the es_security_captcha parameter and not invoking captcha.php.

Affected products

• Evilsentinel Evilsentinel: up to and including 1.0.9

Published 2008-01-18. Last modified 2026-06-16.