CVE:CVE-2008-0351
CNNVD:CNNVD-200801-286
Evilsentinel 1.0.9以及之前版本中的admin/config.PHP允许远程攻击者通过忽视es_security_captcha的参数和不激活captcha.PHP来绕过CAPTCHA测试。
solution:Upgrade evilsentinel evilsentinel to a higher version than 1.0.9,and avoid the version (,1.0.9]