Download
| Alert*
|
oval:org.secpod.oval:def:106674
php-pear-Auth-OpenID is installed oval:org.secpod.oval:def:704686 php-openid is installed oval:org.secpod.oval:def:105925 An implementation of the OpenID single sign-on authentication protocol. oval:org.secpod.oval:def:1901339 examples/consumer/common.php in JanRain PHP OpenID library improperly checks the openid.realm parameter against the SERVER_NAME element in the SERVER superglobal array, which might allow remote attackers to hijack the authentication of arbitrary users via vectors involving a crafted HTTP Host heade ... |
