Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2010-3690

Опубликовано: 07 окт. 2010
Источник: nvd
CVSS2: 4.3
EPSS Низкий

Описание

Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1.1.3, when proxy mode is enabled, allow remote attackers to inject arbitrary web script or HTML via (1) a crafted Proxy Granting Ticket IOU (PGTiou) parameter to the callback function in client.php, (2) vectors involving functions that make getCallbackURL calls, or (3) vectors involving functions that make getURL calls.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apereo:phpcas:*:*:*:*:*:*:*:*
Версия до 1.1.2 (включая)
cpe:2.3:a:apereo:phpcas:0.2:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.3:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.3.1:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.3.2:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.4:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.4.1:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.4.8:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.4.9:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.4.10:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.4.11:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.4.12:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.4.13:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.4.14:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.4.15:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.4.16:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.4.17:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.4.18:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.4.19:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.4.20:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.4.21:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.4.22:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.4.23:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.5.0:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.5.1:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:0.6.0:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:1.0.0:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:1.0.1:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:1.1.0:*:*:*:*:*:*:*
cpe:2.3:a:apereo:phpcas:1.1.1:*:*:*:*:*:*:*

EPSS

Процентиль: 83%
0.02515
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79

Связанные уязвимости

ubuntu логотип

CVE-2010-3690

ubuntu
почти 16 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1.1.3, when proxy mode is enabled, allow remote attackers to inject arbitrary web script or HTML via (1) a crafted Proxy Granting Ticket IOU (PGTiou) parameter to the callback function in client.php, (2) vectors involving functions that make getCallbackURL calls, or (3) vectors involving functions that make getURL calls.

debian логотип

CVE-2010-3690

debian
почти 16 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1 ...

github логотип

GHSA-8hv6-99c4-p438

github
больше 4 лет назад

Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1.1.3, when proxy mode is enabled, allow remote attackers to inject arbitrary web script or HTML via (1) a crafted Proxy Granting Ticket IOU (PGTiou) parameter to the callback function in client.php, (2) vectors involving functions that make getCallbackURL calls, or (3) vectors involving functions that make getURL calls.

EPSS

Процентиль: 83%
0.02515
Низкий

4.3 Medium

CVSS2

Дефекты

CWE-79