Max CVSS | 7.5 | Min CVSS | 6.5 | Total Count | 2 |
ID | CVSS | Summary | Last (major) update | Published | |
CVE-2008-6909 | 6.5 |
Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not sign all required data in requests, which has unspecified impact, probably related to man-in-the-middle attacks that modify critical data and allow remote attackers t
|
17-08-2017 - 01:29 | 06-08-2009 - 18:30 | |
CVE-2008-6908 | 7.5 |
Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, uses an insecure hash when signing requests, which allows remote attackers to impersonate other users and gain privileges.
|
17-08-2017 - 01:29 | 06-08-2009 - 17:30 | |
CVE-2008-6910 | 7.5 |
Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not use timeouts for signed requests, which allows remote attackers to impersonate other users and gain privileges via a replay attack that sends the same request.
|
17-08-2017 - 01:29 | 06-08-2009 - 18:30 |