RelateIQ · Report #3441
Captcha Bypass With Extension
Validstatus
4upvotes
20 Apr 2014disclosed
How it was found
Hello,
These days Captcha's are one of the most vulnerable methods To Protect The Website From Bots, But there is a Extension Named Rumola Which Automatically Fills up the Captcha While We Fill Other Credentials like Email etc. Here a Vulnerability Arises That Bots May Use This Extension Script in their Interface To Bypass the Captcha Check.
As a Proof of concept i have attached some screenshots.