2.6
CVSSv2

CVE-2010-2796

Published: 05/08/2010 Updated: 17/08/2017
CVSS v2 Base Score: 2.6 | Impact Score: 2.9 | Exploitability Score: 4.9
VMScore: 231
Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N

Vulnerability Summary

Cross-site scripting (XSS) vulnerability in phpCAS prior to 1.1.2, when proxy mode is enabled, allows remote malicious users to inject arbitrary web script or HTML via a callback URL.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

joachim fritschi phpcas

joachim fritschi phpcas 0.4.23

joachim fritschi phpcas 0.4.22

joachim fritschi phpcas 0.4.15

joachim fritschi phpcas 0.4.14

joachim fritschi phpcas 0.4.6

joachim fritschi phpcas 0.4.5

joachim fritschi phpcas 0.3.1

joachim fritschi phpcas 0.3

joachim fritschi phpcas 0.5.1

joachim fritschi phpcas 0.5.0

joachim fritschi phpcas 0.4.17

joachim fritschi phpcas 0.4.16

joachim fritschi phpcas 0.4.9

joachim fritschi phpcas 0.4.8

joachim fritschi phpcas 0.4.7

joachim fritschi phpcas 0.4

joachim fritschi phpcas 0.3.2

joachim fritschi phpcas 1.0.0

joachim fritschi phpcas 0.6.0

joachim fritschi phpcas 0.4.19

joachim fritschi phpcas 0.4.18

joachim fritschi phpcas 0.4.11

joachim fritschi phpcas 0.4.10

joachim fritschi phpcas 0.4.2

joachim fritschi phpcas 0.4.1

joachim fritschi phpcas 1.1.0

joachim fritschi phpcas 1.0.1

joachim fritschi phpcas 0.4.21

joachim fritschi phpcas 0.4.20

joachim fritschi phpcas 0.4.13

joachim fritschi phpcas 0.4.12

joachim fritschi phpcas 0.4.4

joachim fritschi phpcas 0.4.3

joachim fritschi phpcas 0.2

Vendor Advisories

Several vulnerabilties have been discovered in phpCAS, a CAS client library for PHP The Moodle course management system includes a copy of phpCAS For the oldstable distribution (lenny), this problem has been fixed in version 1813-3 The stable distribution (squeeze) already contains a fixed version of phpCAS The unstable distribution (sid) alr ...