Description
The OpenID module in Drupal 7.x before 7.16 allows remote OpenID servers to read arbitrary files via a crafted DOCTYPE declaration in an XRDS file.
Remediation
References
Related Vulnerabilities
XOOPS Other Vulnerability (CVE-2006-5810)
WordPress Plugin Business Hours Indicator Cross-Site Scripting (2.3.4)
Plone CMS Improper Input Validation Vulnerability (CVE-2013-4192)
MediaWiki Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-1581)
Chamilo NULL Pointer Dereference Vulnerability (CVE-2026-32894)