4
CVSSv2

CVE-2010-2795

Published: 05/08/2010 Updated: 17/08/2017
CVSS v2 Base Score: 4 | Impact Score: 2.9 | Exploitability Score: 8
VMScore: 356
Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N

Vulnerability Summary

phpCAS prior to 1.1.2 allows remote authenticated users to hijack sessions via a query string containing a crafted ticket value.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

joachim fritschi phpcas 1.0.0

joachim fritschi phpcas 0.6.0

joachim fritschi phpcas 0.4.19

joachim fritschi phpcas 0.4.18

joachim fritschi phpcas 1.1.0

joachim fritschi phpcas 1.0.1

joachim fritschi phpcas 0.4.21

joachim fritschi phpcas 0.4.20

joachim fritschi phpcas 0.4.12

joachim fritschi phpcas 0.4.11

joachim fritschi phpcas 0.4.4

joachim fritschi phpcas 0.4.3

joachim fritschi phpcas 0.2

joachim fritschi phpcas

joachim fritschi phpcas 0.4.23

joachim fritschi phpcas 0.4.22

joachim fritschi phpcas 0.4.14

joachim fritschi phpcas 0.4.13

joachim fritschi phpcas 0.4.6

joachim fritschi phpcas 0.4.5

joachim fritschi phpcas 0.3.1

joachim fritschi phpcas 0.3

joachim fritschi phpcas 0.5.1

joachim fritschi phpcas 0.5.0

joachim fritschi phpcas 0.4.16

joachim fritschi phpcas 0.4.15

joachim fritschi phpcas 0.4.8

joachim fritschi phpcas 0.4.7

joachim fritschi phpcas 0.4

joachim fritschi phpcas 0.3.2

joachim fritschi phpcas 0.4.17

joachim fritschi phpcas 0.4.10

joachim fritschi phpcas 0.4.9

joachim fritschi phpcas 0.4.2

joachim fritschi phpcas 0.4.1

Vendor Advisories

Several vulnerabilties have been discovered in phpCAS, a CAS client library for PHP The Moodle course management system includes a copy of phpCAS For the oldstable distribution (lenny), this problem has been fixed in version 1813-3 The stable distribution (squeeze) already contains a fixed version of phpCAS The unstable distribution (sid) alr ...