Xmppwocky

**Name of the Vulnerable Software and Affected Versions** JanRain PHP OpenID library (aka php-openid) (affected versions not specified) **Description** The issue is related to improper checking of the `openid.realm` parameter against the `SERVER NAME` element in the `SERVER` superglobal array. This might allow remote attackers to hijack the authentication of arbitrary users via crafted HTTP Host headers. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.