PH
Product
Phpcas
2
CVEs
0
On KEV
–
Max CVSS
0
New 30D
Severity mix
Critical 0High 0Medium 0Low 0
Watch
Add Phpcas to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-2796 | – | Aug 5 | Cross-site scripting (XSS) vulnerability in phpCAS before 1.1.2, when proxy mode is enabled, allows remote attackers to inject arbitrary web script or HTML via a callback URL Affected: through 1.1.1; 0.2; 0.3; 0.3.1; 0.3.2; 0.4; +29 more |
| CVE-2010-2795 | – | Aug 5 | phpCAS before 1.1.2 allows remote authenticated users to hijack sessions via a query string containing a crafted ticket value Affected: through 1.1.1; 0.2; 0.3; 0.3.1; 0.3.2; 0.4; +29 more |
Showing 2