Intelligence View
⚡ tsecurity.de Intelligence
Drupal OpenID External Entity Injection
This Metasploit module abuses an XML External Entity Injection vulnerability on the OpenID module from Drupal. The vulnerability exists in the parsing of a malformed XRDS file coming from a malicious OpenID endpoint. This Metasploit module…
Reagiere als Erste:r — dein Feedback zählt!
This Metasploit module abuses an XML External Entity Injection vulnerability on the OpenID module from Drupal. The vulnerability exists in the parsing of a malformed XRDS file coming from a malicious OpenID endpoint. This Metasploit module has been tested successfully on Drupal 7.15 and 7.2 with the OpenID module enabled.
SOCIAL SHARE CARD GENERATOR