NVD

Id
14231  
Name
CVE-2010-2796  
Description
Cross-site scripting (XSS) vulnerability in phpCAS before 1.1.2, when proxy mode is enabled, allows remote attackers to inject arbitrary web script or HTML via a callback URL.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-08-05  
Modified Date
2011-03-01  
Seq
2010-2796  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
78722 14231 CVE-2010-2796 FEDORA-2010-12258  View
78723 14231 CVE-2010-2796 FEDORA-2010-12247  View
78724 14231 CVE-2010-2796 FEDORA-2010-16905  View
78725 14231 CVE-2010-2796 FEDORA-2010-16912  View
78726 14231 CVE-2010-2796 DSA-2172  View
78727 14231 CVE-2010-2796 42160  View
78728 14231 CVE-2010-2796 ADV-2010-2234  View
78729 14231 CVE-2010-2796 ADV-2010-2261  View
78730 14231 CVE-2010-2796 ADV-2010-2909  View
78731 14231 CVE-2010-2796 ADV-2011-0456  View
78732 14231 CVE-2010-2796 phpcas-callback-url-xss(60895)  View
78733 14231 CVE-2010-2796 https://forge.indepnet.net/projects/glpi/repository/revisions/12601  View
78734 14231 CVE-2010-2796 https://issues.jasig.org/browse/PHPCAS-67  View
78735 14231 CVE-2010-2796 https://wiki.jasig.org/display/CASC/phpCAS+ChangeLog  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
39180 JVNDB-2010-004965 phpCAS におけるクロスサイトスクリプティングの脆弱性 phpCAS には、proxy mode が有効になっている際、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-2796 45376 CVE-2010-2796 14231 2.6 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004965.html 2010-08-05 2012-09-25 View