NVD

Id
15047  
Name
CVE-2010-3690  
Description
Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1.1.3, when proxy mode is enabled, allow remote attackers to inject arbitrary web script or HTML via (1) a crafted Proxy Granting Ticket IOU (PGTiou) parameter to the callback function in client.php, (2) vectors involving functions that make getCallbackURL calls, or (3) vectors involving functions that make getURL calls.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-18  
Published
2010-10-07  
Modified Date
2011-03-01  
Seq
2010-3690  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
84041 15047 CVE-2010-3690 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495542#82  View
84042 15047 CVE-2010-3690 FEDORA-2010-16905  View
84043 15047 CVE-2010-3690 FEDORA-2010-16912  View
84044 15047 CVE-2010-3690 FEDORA-2010-15943  View
84045 15047 CVE-2010-3690 FEDORA-2010-15970  View
84046 15047 CVE-2010-3690 DSA-2172  View
84047 15047 CVE-2010-3690 [oss-security] 20100929 CVE request - phpCAS: prevent symlink attacks, directory traversal and XSS during a proxy callback  View
84048 15047 CVE-2010-3690 [oss-security] 20101001 Re: CVE request - phpCAS: prevent symlink attacks, directory traversal and XSS during a proxy callback  View
84049 15047 CVE-2010-3690 [oss-security] 20101001 Re: CVE request - phpCAS: prevent symlink attacks, directory traversal and XSS during a proxy callback  View
84050 15047 CVE-2010-3690 43585  View
84051 15047 CVE-2010-3690 ADV-2010-2705  View
84052 15047 CVE-2010-3690 ADV-2010-2909  View
84053 15047 CVE-2010-3690 ADV-2011-0456  View
84054 15047 CVE-2010-3690 https://developer.jasig.org/source/changelog/jasigsvn?cs=21538  View
84055 15047 CVE-2010-3690 https://forge.indepnet.net/projects/glpi/repository/revisions/12601  View
84056 15047 CVE-2010-3690 https://issues.jasig.org/browse/PHPCAS-80  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37416 JVNDB-2010-003201 phpCAS におけるクロスサイトスクリプティングの脆弱性 phpCAS には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2010-3690 46270 CVE-2010-3690 15047 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003201.html 2010-10-07 2012-03-27 View