CVE-2016-3124

The sanitycheck module in SimpleSAMLphp before 1.14.1 allows remote attackers to learn the PHP version on the system via unspecified vectors.

• CWE-200

• http://www.securityfocus.com/bid/96134Third Party Advisory, VDB Entry
• https://simplesamlphp.org/security/201603-01Vendor Advisory
• http://www.securityfocus.com/bid/96134Third Party Advisory, VDB Entry
• https://simplesamlphp.org/security/201603-01Vendor Advisory

Published

Feb 7, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-3114Kallithea before 0.3.2 allows remote authenticated users to …
• CVE-2016-3115Multiple CRLF injection vulnerabilities in session.c in sshd…6.4
• CVE-2016-3116CRLF injection vulnerability in Dropbear SSH before 2016.72 …
• CVE-2016-3118CRLF injection vulnerability in CA API Gateway (formerly Lay…
• CVE-2016-3119The process_db_args function in plugins/kdb/ldap/libkdb_ldap…
• CVE-2016-3120The validate_as_request function in kdc_util.c in the Key Di…
• CVE-2016-3125The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before…
• CVE-2016-3126Cross-site scripting (XSS) vulnerability in the Management C…
• CVE-2016-3127An information disclosure vulnerability in the logging imple…
• CVE-2016-3128A spoofing vulnerability in the Core of BlackBerry Enterpris…
• CVE-2016-3129A remote shell execution vulnerability in the BlackBerry Goo…
• CVE-2016-3130An information disclosure vulnerability in the Core and Mana…