Peter Wolanin vulnerabilities
5 vulnerabilities
Known vulnerabilities in Peter Wolanin products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1 product.
Products
1- Openid5 vulnerabilities
CVE-2008-6835peter_wolaninopenid
EPSS score1.06%
Cross-site scripting (XSS) vulnerability in OpenID 5.x before 5.x-1.2, a module for Drupal, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2008-6836peter_wolaninopenidEPSS score0.63%
Cross-site request forgery (CSRF) vulnerability in OpenID 5.x before 5x.-1.2, a module for Drupal, allows remote attackers to hijack the authentication of unspecified victims to delete OpenID identities via unknown vectors.CVE-2010-3091drupaldrupal+1EPSS score2.37%
The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not verifying the openid.return_to value, which allows remote attackers to bypass authentication by leveraging an assertion from an OpenID provider.CVE-2010-3685drupaldrupal+1EPSS score2.37%
The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not checking for reuse of openid.response_nonce values, which allows remote attackers to bypass authentication by leveraging an assertion from an OpenID provider.CVE-2010-3686drupaldrupal+1EPSS score2.37%
The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not ensuring that fields are signed, which allows remote attackers to bypass authentication by leveraging an assertion from an OpenID provider.