CVE-2009-2291 Unspecified vulnerability in LoginToboggan 6.x-1.x before 6.x-1.5, a module for Drupal, when "Allow users to login using their e-mail address" is enabled, allows remote blocked users to bypass intende...
MediumCVSS 6.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in LoginToboggan 6.x-1.x before 6.x-1.5, a module for Drupal, when "Allow users to login using their e-mail address" is enabled, allows remote blocked users to bypass intended access restrictions via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chad phillips logintoboggan | = 6.x-1.0 | No fix listed |
| chad phillips logintoboggan | = 6.x-1.1 | No fix listed |
| chad phillips logintoboggan | = 6.x-1.2 | No fix listed |
| chad phillips logintoboggan | = 6.x-1.3 | No fix listed |
| chad phillips logintoboggan | = 6.x-1.4 | No fix listed |
| chad phillips logintoboggan | = 6.x-1.x | No fix listed |
| chad phillips logintoboggan | = 6.x-2.x | No fix listed |
References
- drupal.org patch vendor-advisory
- drupal.org patch vendor-advisory
- 35081 third-party-advisory vendor-advisory
- 54428 vdb-entry
- 34945 patch vdb-entry
- ADV-2009-1312 patch vdb-entry vendor-advisory