Peter Wolanin

Openid

5 vulnerabilities found.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5

CVE-2010-3685

  • EPSS 0.63%
  • Published 29.09.2010 17:00:05
  • Last modified 11.04.2025 00:51:21

The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not checking for reuse of openid.response_nonce values, which allows remote attackers to bypass authentication by le...

5

CVE-2010-3686

  • EPSS 0.63%
  • Published 29.09.2010 17:00:05
  • Last modified 11.04.2025 00:51:21

The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not ensuring that fields are signed, which allows remote attackers to bypass authentication by leveraging an asserti...

5

CVE-2010-3091

  • EPSS 0.63%
  • Published 29.09.2010 17:00:04
  • Last modified 11.04.2025 00:51:21

The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not verifying the openid.return_to value, which allows remote attackers to bypass authentication by leveraging an as...

6.8

CVE-2008-6836

  • EPSS 0.15%
  • Published 27.06.2009 18:47:49
  • Last modified 09.04.2025 00:30:58

Cross-site request forgery (CSRF) vulnerability in OpenID 5.x before 5x.-1.2, a module for Drupal, allows remote attackers to hijack the authentication of unspecified victims to delete OpenID identities via unknown vectors.

4.3

CVE-2008-6835

  • EPSS 0.32%
  • Published 27.06.2009 18:47:45
  • Last modified 09.04.2025 00:30:58

Cross-site scripting (XSS) vulnerability in OpenID 5.x before 5.x-1.2, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.