CVE-2011-5238

CVE-2011-5238 affects google-checkout-php-sample-code up to version 1.3.1. The issue is inadequate TLS hostname verification: the code does not ensure the server hostname matches CN/subjectAltName, enabling MITM with any valid certificate. Impact per note: partial confidentiality and integrity; n...