2981 matches found
SA-2008-016 - OpenID - Incorrect claimed_id returned for OpenID 2.0
The OpenID module has a vulnerability which allows OpenID version 2.0 positive assertions that are not properly verified to return an invalid or impersonated claimedid. To exploit this vulnerability an attacker could set up an OpenID provider, example1.com, that claimed to be the authority for...
Remote file inclusion
PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the openidrootpath parameter...
CVE-2007-5173
PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the openidrootpath parameter...
CVE-2007-5173
PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the openidrootpath parameter...
CVE-2007-5173
CVE-2007-5173 is a PHP remote file inclusion in phpBB Openid 0.2.0. The flaw resides in includes/openid/Auth/OpenID/BBStore.php where the openid_root_path parameter allows an attacker to cause the inclusion of a remote file and thereby execute arbitrary PHP code. This is triggered via a URL suppl...
phpBB Mod OpenID 0.2.0 BBStore.php Remote File Inclusion Vuln
No description provided by source. ============================================ = = = XORON c 2007 = = = ============================================ = = = phpBB Openid 0.2.0 Remote File Include = = = ============================================ = = Download: =...
phpBB Mod OpenID 0.2.0 BBStore.php Remote File Inclusion
+++++++++++++++++++++++++++++++++++++++++++++++++++ + + phpBB Mod OpenID 0.2.0 BBStore.php RFI + Risk: High + Found by Seph1roth + Site: http://blackroots.it + +++++++++++++++++++++++++++++++++++++++++++++++++++ + Vulnerable Script Download:...
phpBB Mod OpenID 0.2.0 BBStore.php Remote File Inclusion Vuln
Exploit for unknown platform in category web applications ============================================================= phpBB Mod OpenID 0.2.0 BBStore.php Remote File Inclusion Vuln ============================================================= ============================================ = = =...
phpBB Mod OpenID 0.2.0 - BBStore.php Remote File Inclusion
phpBB Mod OpenID 0.2.0 - BBStore.php Remote File Inclusion ============================================ = = = XORON c 2007 = = = ============================================ = = = phpBB Openid 0.2.0 Remote File Include = = = ============================================ = = Download: =...
phpBB Mod OpenID 0.2.0 - 'BBStore.php' Remote File Inclusion
============================================ = = = XORON c 2007 = = = ============================================ = = = phpBB Openid 0.2.0 Remote File Include = = = ============================================ = = Download: = http://sourceforge.net/project/showfiles.php?groupid=178846 =...
CVE-2007-1651
Cross-site request forgery CSRF vulnerability in OpenID allows remote attackers to restore the login session of a user on an OpenID enabled site via unspecified vectors related to an arbitrary remote web site and cached tokens, after the user has signed into an OpenID server, logged into the Open...
CVE-2007-1652
OpenID allows remote attackers to forcibly log a user into an OpenID enabled site, divulge the user's personal information to this site, and add it site to the trusted sites list via a crafted web page, related to cached tokens...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in OpenID allows remote attackers to restore the login session of a user on an OpenID enabled site via unspecified vectors related to an arbitrary remote web site and cached tokens, after the user has signed into an OpenID server, logged into the Open...
Design/Logic Flaw
OpenID allows remote attackers to forcibly log a user into an OpenID enabled site, divulge the user's personal information to this site, and add it site to the trusted sites list via a crafted web page, related to cached tokens...
CVE-2007-1652
OpenID allows remote attackers to forcibly log a user into an OpenID enabled site, divulge the user's personal information to this site, and add it site to the trusted sites list via a crafted web page, related to cached tokens...
CVE-2007-1651
CVE-2007-1651 describes a CSRF vulnerability in OpenID that can allow remote attackers to restore a user’s login session on an OpenID-enabled site after the user has signed into an OpenID server, logged into the site, and then logged out. Connected sources show a CVSSv2 base score of 6.8 (MEDIUM)...
CVE-2007-1652
CVE-2007-1652 involves an OpenID-based vulnerability where remote attackers can force a user to log into an OpenID-enabled site, disclose the user’s personal information to that site, and add the site to the user’s trusted list via a crafted page related to cached tokens. The connected sources co...
CVE-2007-1651
Cross-site request forgery CSRF vulnerability in OpenID allows remote attackers to restore the login session of a user on an OpenID enabled site via unspecified vectors related to an arbitrary remote web site and cached tokens, after the user has signed into an OpenID server, logged into the Open...
Authentication bypass via attacker provided openid server
Impact The outdated version 1 of the Steam Socialite Provider doesn't check properly if the login comes from steamcommunity.com, allowing a malicious actor to substitute their own openID server. Patches This vulnerability only affects the outdated v1.x versions of the package. These are no longer...