CVE-2010-2796

Cross-site scripting (XSS) vulnerability in phpCAS before 1.1.2, when proxy mode is enabled, allows remote attackers to inject arbitrary web script or HTML via a callback URL.

Published: Aug 5, 2010
Updated: Apr 13, 2023
CVE: CVE-2010-2796
Severity: Low
Exploit:

CVSS v2:

Severity: Low
Score: 2.6
AV:N/AC:H/Au:N/C:N/I:P/A:N

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
joachim_fritschi / phpcas	0.5.0	0.5.0.x
joachim_fritschi / phpcas	0.4.13	0.4.13.x
joachim_fritschi / phpcas	1.1.0	1.1.0.x
joachim_fritschi / phpcas	0.4.20	0.4.20.x
joachim_fritschi / phpcas	0.4.6	0.4.6.x
joachim_fritschi / phpcas	0.4.14	0.4.14.x
joachim_fritschi / phpcas	0.4.16	0.4.16.x
joachim_fritschi / phpcas	0.4.19	0.4.19.x
joachim_fritschi / phpcas	0.6.0	0.6.0.x
joachim_fritschi / phpcas	0.3.2	0.3.2.x
joachim_fritschi / phpcas	0.4.5	0.4.5.x
joachim_fritschi / phpcas	0.4.2	0.4.2.x
joachim_fritschi / phpcas	0.4.8	0.4.8.x
joachim_fritschi / phpcas	0.4.17	0.4.17.x
joachim_fritschi / phpcas	0.4.4	0.4.4.x
joachim_fritschi / phpcas	0.4.22	0.4.22.x
joachim_fritschi / phpcas	0.4.10	0.4.10.x
joachim_fritschi / phpcas	0.4.11	0.4.11.x
joachim_fritschi / phpcas	0.4.3	0.4.3.x
joachim_fritschi / phpcas	0.3	0.3.x
joachim_fritschi / phpcas	0.5.1	0.5.1.x
joachim_fritschi / phpcas	1.0.0	1.0.0.x
joachim_fritschi / phpcas	0.3.1	0.3.1.x
joachim_fritschi / phpcas	0.2	0.2.x
joachim_fritschi / phpcas	0.4.1	0.4.1.x
joachim_fritschi / phpcas	0.4.21	0.4.21.x
joachim_fritschi / phpcas	1.0.1	1.0.1.x
joachim_fritschi / phpcas	0.4.12	0.4.12.x
joachim_fritschi / phpcas	0.4.18	0.4.18.x
joachim_fritschi / phpcas	-	1.1.1.x
joachim_fritschi / phpcas	0.4.7	0.4.7.x
joachim_fritschi / phpcas	0.4.15	0.4.15.x
joachim_fritschi / phpcas	0.4	0.4.x
joachim_fritschi / phpcas	0.4.23	0.4.23.x
joachim_fritschi / phpcas	0.4.9	0.4.9.x

Vulnerability Database

289,784

CVE-2010-2796