NetSight
IP …
low2.6

CVE-2010-2796

Cross-site scripting (XSS) vulnerability in phpCAS before 1.1.2, when proxy mode is enabled, allows remote attackers to inject arbitrary web script or HTML via…

Impact

Cross-site scripting (XSS) vulnerability in phpCAS before 1.1.2, when proxy mode is enabled, allows remote attackers to inject arbitrary web script or HTML via a callback URL.

Affected products

VendorProductAffected versions
Joachim FritschiPhpcas
through 1.1.1
Versions 0.2, 0.3, 0.3.1, 0.3.2, 0.4

Weakness classification

CWE-79

References