Vendor/product archive

janrain / php-openid CVEs

Beta · best-effort

3 CVEs tagged to janrain / php-openid — 0 Critical, 2 High, 1 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to janrain vendor archive

CVE-2016-2049

Published Feb 1, 2016

examples/consumer/common.php in JanRain PHP OpenID library (aka php-openid) improperly checks the openid.realm parameter against the SERVER_NAME element in the SERVER superglobal…

CVSS 8.8 · High

Vendor/product tagsBeta · best-effort

CVE-2013-4701

Published Aug 21, 2013

Auth/Yadis/XML.php in PHP OpenID Library 2.2.2 and earlier allows remote attackers to read arbitrary files, send HTTP requests to intranet servers, or cause a denial of service (C…

CVSS 7.5 · High

Vendor/product tagsBeta · best-effort

CVE-2011-3707

Published Sep 23, 2011

JanRain PHP OpenID library (aka php-openid) 2.2.2 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path…

CVSS 5.0 · Medium

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1