CVE-2010-3686
Published Sep 29, 2010The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not ensuring that fields are signed, which al…
Vendor archive
peter_wolanin CVEs
Beta · best-effort5 CVEs tagged to vendor peter_wolanin — 0 Critical, 0 High, 5 Medium, 0 Low, 0 Unrated.
CVE-2010-3685
Published Sep 29, 2010The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not checking for reuse of openid.response_non…
CVE-2010-3091
Published Sep 29, 2010The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not verifying the openid.return_to value, whi…
CVE-2008-6836
Published Jun 27, 2009Cross-site request forgery (CSRF) vulnerability in OpenID 5.x before 5x.-1.2, a module for Drupal, allows remote attackers to hijack the authentication of unspecified victims to d…
CVE-2008-6835
Published Jun 27, 2009Cross-site scripting (XSS) vulnerability in OpenID 5.x before 5.x-1.2, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Showing 1-5 of 5 CVEsPage 1 of 1