Ja-Sig Phpcas Client Library vulnerabilities

1 known vulnerability affecting ja-sig/phpcas_client_library.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2010-1618MEDIUMCVSS 4.3v1.0.0v1.0.12010-04-29

CVE-2010-1618 [MEDIUM] CWE-79 CVE-2010-1618: Cross-site scripting (XSS) vulnerability in the phpCAS client library before 1.1.0, as used in Moodl Cross-site scripting (XSS) vulnerability in the phpCAS client library before 1.1.0, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled in an error message.