Lucene search
+L

6 matches found

Github Security Blog
Github Security Blog
•added 2023/01/17 9:30 a.m.•38 views

simplesamlphp-module-openidprovider Cross Site Scripting vulnerability

A vulnerability was found in simplesamlphp simplesamlphp-module-openidprovider up to 0.8.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file templates/trust.tpl.php. The manipulation of the argument StateID leads to cross site scripting...

5.4CVSS5.3AI score0.00563EPSS
SaveExploits0References6Affected Software1
Prion
Prion
•added 2023/01/17 8:15 a.m.•32 views

Cross site scripting

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in simplesamlphp simplesamlphp-module-openidprovider up to 0.8.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file templates/trust.tpl.php. The manipulation of the argument StateID leads...

4.9CVSS6.5AI score0.00563EPSS
SaveExploits0References4Affected Software1
Vulnrichment
Vulnrichment
•added 2023/01/17 7:35 a.m.•11 views

CVE-2010-10008 simplesamlphp simplesamlphp-module-openidprovider trust.tpl.php cross site scripting

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in simplesamlphp simplesamlphp-module-openidprovider up to 0.8.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file templates/trust.tpl.php. The manipulation of the argument StateID leads...

4CVSS6.2AI score0.00563EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2023/01/17 7:35 a.m.•45 views

CVE-2010-10008 simplesamlphp simplesamlphp-module-openidprovider trust.tpl.php cross site scripting

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in simplesamlphp simplesamlphp-module-openidprovider up to 0.8.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file templates/trust.tpl.php. The manipulation of the argument StateID leads...

4CVSS5.2AI score0.00563EPSS
SaveExploits0References4
CVE
CVE
•added 2023/01/17 7:35 a.m.•68 views

CVE-2010-10008

Summary: CVE-2010-10008 affects the simplesamlphp-module-openidprovider component (versions up to 0.8.x). The issue is a cross-site scripting flaw in the templates/trust.tpl.php file triggered by manipulation of the StateID argument. Exploitation can be remote. The publicly documented remediation...

5.4CVSS4.4AI score0.00563EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/17 12:00 a.m.•5 views

CVE-2010-10008: Improper Neutralization of Input During Web Page Generation

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in simplesamlphp simplesamlphp-module-openidprovider up to 0.8.x. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file templates/trust.tpl.php. The manipulation of the argument StateID leads...

5.4CVSS3.7AI score0.00563EPSS
SaveExploits0References2
Rows per page
Query Builder