VendorsJoachim Fritschiphpcas1.1.0
Vulnerabilities

Joachim Fritschi Phpcas 1.1.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2010-2795
phpCAS before 1.1.2 allows remote authenticated users to hijack sessions via a query string containing a crafted ticket value.
Published 2010-08-05 · Modified
4.0EPSS 0.023
CVE-2010-2796
Cross-site scripting (XSS) vulnerability in phpCAS before 1.1.2, when proxy mode is enabled, allows remote attackers to inject arbitrary web script or HTML via a callback URL.
Published 2010-08-05 · Modified
2.6EPSS 0.025