Lucene search
PRIOn knowledge basePRION:CVE-2016-2049HistoryFeb 01, 2016 - 9:59 p.m.
Design/Logic Flaw
2016-02-0121:59:00
PRIOn knowledge base
www.prio-n.com
2
examples/consumer/common.php in JanRain PHP OpenID library (aka php-openid) improperly checks the openid.realm parameter against the SERVER_NAME element in the SERVER superglobal array, which might allow remote attackers to hijack the authentication of arbitrary users via vectors involving a crafted HTTP Host header.
Related
veracode
veracode
Authentication Hijack
2017-07-26 03:41:29
cvelist
cvelist
CVE-2016-2049
2016-02-01 21:00:00
cve
cve
CVE-2016-2049
2016-02-01 21:59:03
ubuntucve
ubuntucve
CVE-2016-2049
2016-02-01 00:00:00
nvd
nvd
CVE-2016-2049
2016-02-01 21:59:03