Janrain Php Openid Library
The issue is related to improper checking of the `openid.realm` parameter against the `SERVER NAME` element in the `SERVER` superglobal array. This might allow remote attackers to hijack the authentication of arbitrary users via crafted HTTP Host headers.