Not the login. Captcha is used for registration of users and posting of comments on ads.
If your integrating with Nuke obviously they are registering with nuke and getting past nuke as thats where we grab the user data and users truly register accounts. I dont remember one way or another if nuke uses CAPTCHA on registration. If a user registers on Nuke and authenticates their account through Nuke and is placed in a regular nuke member account and in classifieds you give that usergroup permission to post ads sure they can post ads. See where I am going here. Obviously Nuke could not distinguish them as a bot and alot of times you can not because they are not really bots but real people posting spam. So i guess the user you where asking about who posted 5 ads on my site was someone who got through nukes bot checking and registered a true account with posting priviledges.
Just as a sidenote just in the week or so I had ravenNuke installed I recieved like 50 emails about Nuke Sentinel stopping someone from accessing nuke etc. I removed nuke as a result and it goes back to what I stated to you before about nuke there seems to be so many exploits with nuke there are bots etc just searching the web looking for nuke sites but it was nothing installing it to let you know it does work.