zend zendopenid vulnerabilities and exploits

(subscribe to this query)

The GenericConsumer class in the Consumer component in ZendOpenId prior to 2.0.2 and the Zend_OpenId_Consumer class in Zend Framework 1 prior to 1.12.4 does not verify that the openid_op_endpoint value identifies the same Identity Provider as the provider used in the association ...

Zend Zendopenid Zend Zend Framework

Zend Framework 1 (ZF1) prior to 1.12.4, Zend Framework 2 prior to 2.1.6 and 2.2.x prior to 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService_Technorati, and ZendService_WindowsAzure prior to 2.0.2, ZendService_Amazo...

Zend Zendrest Zend Zend Framework Zend Zendservice Slideshare Zend Zendservice Api Zend Zendservice Audioscrobbler Zend Zendservice Amazon Zend Zendservice Technorati Zend Zendservice Windowsazure Zend Zendopenid Zend Zendservice Nirvanix

Zend Framework 1 (ZF1) prior to 1.12.4, Zend Framework 2 prior to 2.1.6 and 2.2.x prior to 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService_Technorati, and ZendService_WindowsAzure prior to 2.0.2, ZendService_Amazo...

Zend Zendrest Zend Zend Framework Zend Zendservice Slideshare Zend Zendservice Api Zend Zendservice Audioscrobbler Zend Zendservice Amazon Zend Zendservice Technorati Zend Zendservice Windowsazure Zend Zendopenid Zend Zendservice Nirvanix

Zend Framework 1 (ZF1) prior to 1.12.4, Zend Framework 2 prior to 2.1.6 and 2.2.x prior to 2.2.6, ZendOpenId, ZendRest, ZendService_AudioScrobbler, ZendService_Nirvanix, ZendService_SlideShare, ZendService_Technorati, and ZendService_WindowsAzure prior to 2.0.2, ZendService_Amazo...

Zend Zendrest Zend Zend Framework Zend Zendservice Slideshare Zend Zendservice Api Zend Zendservice Audioscrobbler Zend Zendservice Amazon Zend Zendservice Technorati Zend Zendservice Windowsazure Zend Zendopenid Zend Zendservice Nirvanix

The GenericConsumer class in the Consumer component in ZendOpenId prior to 2.0.2 and the Zend_OpenId_Consumer class in Zend Framework 1 prior to 1.12.4 violate the OpenID 2.0 protocol by ensuring only that at least one field is signed, which allows remote malicious users to bypas...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook