CVE-2010-3690

Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1.1.3, when proxy mode is enabled, allow remote attackers to inject arbitrary web script…

published October 7, 2010

CVSS
—
EPSS
3%
Percentile
84.7
In the wild
Unconfirmed
What it is

Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1.1.3, when proxy mode is enabled, allow remote attackers to inject arbitrary web script or HTML via (1) a crafted Proxy Granting Ticket IOU (PGTiou) parameter to the callback function in client.php, (2) vectors involving functions that make getCallbackURL calls, or (3) vectors involving functions that make getURL calls.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02515 · 84.7th percentile
Published
2010-10-07T20:21Z
EPSS history
Timeline
  • 07 OCT 20:21Z
    Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1.1.3, when proxy mode is enabled, allow remote attackers to inject arbitrary web script…
    cvelistv5