auxiliary/gather/drupal_openid_xxe

functional

Drupal OpenID External Entity Injection

view exploit source metasploittype auxiliarypublished 2012-10-17catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2012-4554US	medium5.0	15.8% (97th)	Exploit	2012-11-11
The OpenID module in Drupal 7.x before 7.16 allows remote OpenID servers to read arbitrary files via a crafted DOCTYPE declaration in an XRDS file.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.