apereo phpcas 0.4.10 vulnerabilities and exploits

(subscribe to this query)

Directory traversal vulnerability in the callback function in client.php in phpCAS prior to 1.1.3, when proxy mode is enabled, allows remote malicious users to create or overwrite arbitrary files via directory traversal sequences in a Proxy Granting Ticket IOU (PGTiou) parameter.

Apereo Phpcas Apereo Phpcas 0.2 Apereo Phpcas 0.3 Apereo Phpcas 0.3.1 Apereo Phpcas 0.3.2 Apereo Phpcas 0.4 Apereo Phpcas 0.4.1 Apereo Phpcas 0.4.8 Apereo Phpcas 0.4.9 Apereo Phpcas 0.4.10 Apereo Phpcas 0.4.11 Apereo Phpcas 0.4.12

Multiple cross-site scripting (XSS) vulnerabilities in phpCAS prior to 1.1.3, when proxy mode is enabled, allow remote malicious users to inject arbitrary web script or HTML via (1) a crafted Proxy Granting Ticket IOU (PGTiou) parameter to the callback function in client.php, (2)...

Apereo Phpcas Apereo Phpcas 0.2 Apereo Phpcas 0.3 Apereo Phpcas 0.3.1 Apereo Phpcas 0.3.2 Apereo Phpcas 0.4 Apereo Phpcas 0.4.1 Apereo Phpcas 0.4.8 Apereo Phpcas 0.4.9 Apereo Phpcas 0.4.10 Apereo Phpcas 0.4.11 Apereo Phpcas 0.4.12

PGTStorage/pgt-file.php in phpCAS prior to 1.1.3, when proxy mode is enabled, allows local users to overwrite arbitrary files via a symlink attack on an unspecified file.

Apereo Phpcas Apereo Phpcas 0.2 Apereo Phpcas 0.3 Apereo Phpcas 0.3.1 Apereo Phpcas 0.3.2 Apereo Phpcas 0.4 Apereo Phpcas 0.4.1 Apereo Phpcas 0.4.8 Apereo Phpcas 0.4.9 Apereo Phpcas 0.4.10 Apereo Phpcas 0.4.11 Apereo Phpcas 0.4.12

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook