2790 matches found
CVE-2010-0286
Unspecified vulnerability in the OpenID Identity Authentication extension in TYPO3 4.3.0 allows remote attackers to bypass authentication and gain access to a backend user account via unknown attack vectors in which both the attacker and victim have an OpenID provider that discards identities...
Authentication flaw
Unspecified vulnerability in the OpenID Identity Authentication extension in TYPO3 4.3.0 allows remote attackers to bypass authentication and gain access to a backend user account via unknown attack vectors in which both the attacker and victim have an OpenID provider that discards identities...
CVE-2010-0286
Unspecified vulnerability in the OpenID Identity Authentication extension in TYPO3 4.3.0 allows remote attackers to bypass authentication and gain access to a backend user account via unknown attack vectors in which both the attacker and victim have an OpenID provider that discards identities...
CVE-2010-0286
CVE-2010-0286 affects TYPO3 4.3.0 with the OpenID system extension enabled. An authentication bypass vulnerability arises when both attacker and victim use an OpenID provider that discards identities during authentication, allowing an arbitrary website user to log into the TYPO3 backend with the ...
CVE-2010-0286
Unspecified vulnerability in the OpenID Identity Authentication extension in TYPO3 4.3.0 allows remote attackers to bypass authentication and gain access to a backend user account via unknown attack vectors in which both the attacker and victim have an OpenID provider that discards identities...
Vulnerability in TYPO3 Core
It has been discovered that TYPO3 Core is vulnerable to authentication bypass. Component Type: TYPO3 Core Affected Versions: TYPO3 version 4.3.0 with enabled system extension "openid" Vulnerability Types: Authentication Bypass Overall Severity: High Release Date: January 14, 2010 Vulnerable...
FreeBSD : drupal -- multiple vulnerabilities (bad1b090-a7ca-11de-873f-0030843d3802)
Drupal Team reports : The core OpenID module does not correctly implement Form API for the form that allows one to link user accounts with OpenID identifiers. A malicious user is therefore able to use cross site request forgeries to add attacker controlled OpenID identities to existing accounts...
Fedora 11 : drupal-6.14-1.fc11 (2009-9721)
Fixes SA-CORE-2009-008 http://drupal.org/node/579482 Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to http://host/drupal/update.php to run the upgrade script. Multiple vulnerabilities and weaknesses were discovered in Drupal...
Fedora 10 : drupal-6.14-1.fc10 (2009-9751)
Fixes SA-CORE-2009-008 http://drupal.org/node/579482 Remember to log in to your site as the admin user before upgrading this package. After upgrading the package, browse to http://host/drupal/update.php to run the upgrade script. Multiple vulnerabilities and weaknesses were discovered in Drupal...
drupal -- multiple vulnerabilities
Drupal Team reports: The core OpenID module does not correctly implement Form API for the form that allows one to link user accounts with OpenID identifiers. A malicious user is therefore able to use cross site request forgeries to add attacker controlled OpenID identities to existing accounts...
SA-CORE-2009-008 - Drupal core - Multiple vulnerabilities
Multiple vulnerabilities and weaknesses were discovered in Drupal. OpenID association cross site request forgeries The OpenID module in Drupal 6 allows users to create an account or log into a Drupal site using one or more OpenID identities. The core OpenID module does not correctly implement For...
SA-CONTRIB-2009-059 - OpenID - Multiple vulnerabilities
The contributed OpenID module for Drupal 5 allows users to create an account or log into a Drupal site using one or more OpenID identities. The module does not correctly implement Form API for the form that allows one to link user accounts with OpenID identifiers. A malicious user is therefore ab...
CVE-2008-6836
Cross-site request forgery CSRF vulnerability in OpenID 5.x before 5x.-1.2, a module for Drupal, allows remote attackers to hijack the authentication of unspecified victims to delete OpenID identities via unknown vectors...
CVE-2008-6835
Cross-site scripting XSS vulnerability in OpenID 5.x before 5.x-1.2, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site scripting
Cross-site scripting XSS vulnerability in OpenID 5.x before 5.x-1.2, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in OpenID 5.x before 5x.-1.2, a module for Drupal, allows remote attackers to hijack the authentication of unspecified victims to delete OpenID identities via unknown vectors...
CVE-2008-6835
OpenID 5.x module for Drupal is affected by CVE-2008-6835. The vulnerability is a Cross-site Scripting (XSS) flaw in OpenID 5.x before 5.x-1.2 that allows remote attackers to inject arbitrary script or HTML via unspecified vectors. The affected product is Drupal’s OpenID 5.x module; root cause is...
CVE-2008-6836
Cross-site request forgery CSRF vulnerability in OpenID 5.x before 5x.-1.2, a module for Drupal, allows remote attackers to hijack the authentication of unspecified victims to delete OpenID identities via unknown vectors...
CVE-2008-6836
CVE-2008-6836 describes a CSRF vulnerability in the OpenID 5.x Drupal module (versions before 5x.-1.2) that allows remote attackers to hijack user authentication and delete OpenID identities via unspecified vectors. Affected software is the OpenID Drupal module; the root cause is a CSRF flaw in t...