ByteOS Network

Vulnerability Details :

CVE-2010-3690

Assigner-redhat

Assigner Org ID-53f830b8-0a3f-465b-8143-3b8a9948e749

Published At-07 Oct, 2010 | 20:21

Updated At-07 Aug, 2024 | 03:18

Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1.1.3, when proxy mode is enabled, allow remote attackers to inject arbitrary web script or HTML via (1) a crafted Proxy Granting Ticket IOU (PGTiou) parameter to the callback function in client.php, (2) vectors involving functions that make getCallbackURL calls, or (3) vectors involving functions that make getURL calls.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:redhat

Assigner Org ID:53f830b8-0a3f-465b-8143-3b8a9948e749

Published At:07 Oct, 2010 | 20:21

Updated At:07 Aug, 2024 | 03:18

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

n/a

Product

n/a

Versions

Affected

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495542#82	x_refsource_CONFIRM
http://www.debian.org/security/2011/dsa-2172	vendor-advisory x_refsource_DEBIAN
https://issues.jasig.org/browse/PHPCAS-80	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2011/0456	vdb-entry x_refsource_VUPEN
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049600.html	vendor-advisory x_refsource_FEDORA
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049602.html	vendor-advisory x_refsource_FEDORA
http://www.vupen.com/english/advisories/2010/2909	vdb-entry x_refsource_VUPEN
http://www.securityfocus.com/bid/43585	vdb-entry x_refsource_BID
http://secunia.com/advisories/42149	third-party-advisory x_refsource_SECUNIA
https://forge.indepnet.net/projects/glpi/repository/revisions/12601	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2010/2705	vdb-entry x_refsource_VUPEN
http://secunia.com/advisories/43427	third-party-advisory x_refsource_SECUNIA
http://www.openwall.com/lists/oss-security/2010/09/29/6	mailing-list x_refsource_MLIST
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050428.html	vendor-advisory x_refsource_FEDORA
https://developer.jasig.org/source/changelog/jasigsvn?cs=21538	x_refsource_CONFIRM
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050415.html	vendor-advisory x_refsource_FEDORA
http://secunia.com/advisories/41878	third-party-advisory x_refsource_SECUNIA
http://www.openwall.com/lists/oss-security/2010/10/01/5	mailing-list x_refsource_MLIST
http://www.openwall.com/lists/oss-security/2010/10/01/2	mailing-list x_refsource_MLIST
http://secunia.com/advisories/42184	third-party-advisory x_refsource_SECUNIA

Hyperlink: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495542#82

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.debian.org/security/2011/dsa-2172

Resource:

vendor-advisory

x_refsource_DEBIAN

Hyperlink: https://issues.jasig.org/browse/PHPCAS-80

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.vupen.com/english/advisories/2011/0456

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049600.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049602.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://www.vupen.com/english/advisories/2010/2909

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://www.securityfocus.com/bid/43585

Resource:

vdb-entry

x_refsource_BID

Hyperlink: http://secunia.com/advisories/42149

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://forge.indepnet.net/projects/glpi/repository/revisions/12601

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.vupen.com/english/advisories/2010/2705

Resource:

vdb-entry

x_refsource_VUPEN

Hyperlink: http://secunia.com/advisories/43427

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.openwall.com/lists/oss-security/2010/09/29/6

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050428.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: https://developer.jasig.org/source/changelog/jasigsvn?cs=21538

Resource:

x_refsource_CONFIRM

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050415.html

Resource:

vendor-advisory

x_refsource_FEDORA

Hyperlink: http://secunia.com/advisories/41878

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://www.openwall.com/lists/oss-security/2010/10/01/5

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://www.openwall.com/lists/oss-security/2010/10/01/2

Resource:

mailing-list

x_refsource_MLIST

Hyperlink: http://secunia.com/advisories/42184

Resource:

third-party-advisory

x_refsource_SECUNIA

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495542#82	x_refsource_CONFIRM x_transferred
http://www.debian.org/security/2011/dsa-2172	vendor-advisory x_refsource_DEBIAN x_transferred
https://issues.jasig.org/browse/PHPCAS-80	x_refsource_CONFIRM x_transferred
http://www.vupen.com/english/advisories/2011/0456	vdb-entry x_refsource_VUPEN x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049600.html	vendor-advisory x_refsource_FEDORA x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049602.html	vendor-advisory x_refsource_FEDORA x_transferred
http://www.vupen.com/english/advisories/2010/2909	vdb-entry x_refsource_VUPEN x_transferred
http://www.securityfocus.com/bid/43585	vdb-entry x_refsource_BID x_transferred
http://secunia.com/advisories/42149	third-party-advisory x_refsource_SECUNIA x_transferred
https://forge.indepnet.net/projects/glpi/repository/revisions/12601	x_refsource_CONFIRM x_transferred
http://www.vupen.com/english/advisories/2010/2705	vdb-entry x_refsource_VUPEN x_transferred
http://secunia.com/advisories/43427	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.openwall.com/lists/oss-security/2010/09/29/6	mailing-list x_refsource_MLIST x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050428.html	vendor-advisory x_refsource_FEDORA x_transferred
https://developer.jasig.org/source/changelog/jasigsvn?cs=21538	x_refsource_CONFIRM x_transferred
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050415.html	vendor-advisory x_refsource_FEDORA x_transferred
http://secunia.com/advisories/41878	third-party-advisory x_refsource_SECUNIA x_transferred
http://www.openwall.com/lists/oss-security/2010/10/01/5	mailing-list x_refsource_MLIST x_transferred
http://www.openwall.com/lists/oss-security/2010/10/01/2	mailing-list x_refsource_MLIST x_transferred
http://secunia.com/advisories/42184	third-party-advisory x_refsource_SECUNIA x_transferred

Hyperlink: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=495542#82

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.debian.org/security/2011/dsa-2172

Resource:

vendor-advisory

x_refsource_DEBIAN

x_transferred

Hyperlink: https://issues.jasig.org/browse/PHPCAS-80

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2011/0456

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049600.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-October/049602.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2010/2909

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://www.securityfocus.com/bid/43585

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: http://secunia.com/advisories/42149

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://forge.indepnet.net/projects/glpi/repository/revisions/12601

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.vupen.com/english/advisories/2010/2705

Resource:

vdb-entry

x_refsource_VUPEN

x_transferred

Hyperlink: http://secunia.com/advisories/43427

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2010/09/29/6

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050428.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: https://developer.jasig.org/source/changelog/jasigsvn?cs=21538

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050415.html

Resource:

vendor-advisory

x_refsource_FEDORA

x_transferred

Hyperlink: http://secunia.com/advisories/41878

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2010/10/01/5

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://www.openwall.com/lists/oss-security/2010/10/01/2

Resource:

mailing-list

x_refsource_MLIST

x_transferred

Hyperlink: http://secunia.com/advisories/42184

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:secalert@redhat.com

Published At:07 Oct, 2010 | 21:00

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	4.3	MEDIUM	AV:N/AC:M/Au:N/C:N/I:P/A:N

Type: Primary

Version: 2.0

Base score: 4.3

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:N/I:P/A:N

CPE Matches

apereo>>phpcas>>Versions up to 1.1.2(inclusive)

cpe:2.3:a:apereo:phpcas:*:*:*:*:*:*:*:*

apereo>>phpcas>>0.2

cpe:2.3:a:apereo:phpcas:0.2:*:*:*:*:*:*:*

apereo>>phpcas>>0.3

cpe:2.3:a:apereo:phpcas:0.3:*:*:*:*:*:*:*

apereo>>phpcas>>0.3.1

cpe:2.3:a:apereo:phpcas:0.3.1:*:*:*:*:*:*:*

apereo>>phpcas>>0.3.2

cpe:2.3:a:apereo:phpcas:0.3.2:*:*:*:*:*:*:*

apereo>>phpcas>>0.4

cpe:2.3:a:apereo:phpcas:0.4:*:*:*:*:*:*:*

apereo>>phpcas>>0.4.1

cpe:2.3:a:apereo:phpcas:0.4.1:*:*:*:*:*:*:*

apereo>>phpcas>>0.4.8

cpe:2.3:a:apereo:phpcas:0.4.8:*:*:*:*:*:*:*

apereo>>phpcas>>0.4.9

cpe:2.3:a:apereo:phpcas:0.4.9:*:*:*:*:*:*:*

apereo>>phpcas>>0.4.10

cpe:2.3:a:apereo:phpcas:0.4.10:*:*:*:*:*:*:*

apereo>>phpcas>>0.4.11

cpe:2.3:a:apereo:phpcas:0.4.11:*:*:*:*:*:*:*

apereo>>phpcas>>0.4.12

cpe:2.3:a:apereo:phpcas:0.4.12:*:*:*:*:*:*:*

apereo>>phpcas>>0.4.13

cpe:2.3:a:apereo:phpcas:0.4.13:*:*:*:*:*:*:*

apereo>>phpcas>>0.4.14

cpe:2.3:a:apereo:phpcas:0.4.14:*:*:*:*:*:*:*

apereo>>phpcas>>0.4.15

cpe:2.3:a:apereo:phpcas:0.4.15:*:*:*:*:*:*:*

apereo>>phpcas>>0.4.16

cpe:2.3:a:apereo:phpcas:0.4.16:*:*:*:*:*:*:*

apereo>>phpcas>>0.4.17

cpe:2.3:a:apereo:phpcas:0.4.17:*:*:*:*:*:*:*

apereo>>phpcas>>0.4.18

cpe:2.3:a:apereo:phpcas:0.4.18:*:*:*:*:*:*:*

apereo>>phpcas>>0.4.19

cpe:2.3:a:apereo:phpcas:0.4.19:*:*:*:*:*:*:*

apereo>>phpcas>>0.4.20

cpe:2.3:a:apereo:phpcas:0.4.20:*:*:*:*:*:*:*

apereo>>phpcas>>0.4.21

cpe:2.3:a:apereo:phpcas:0.4.21:*:*:*:*:*:*:*

apereo>>phpcas>>0.4.22

cpe:2.3:a:apereo:phpcas:0.4.22:*:*:*:*:*:*:*

apereo>>phpcas>>0.4.23

cpe:2.3:a:apereo:phpcas:0.4.23:*:*:*:*:*:*:*

apereo>>phpcas>>0.5.0

cpe:2.3:a:apereo:phpcas:0.5.0:*:*:*:*:*:*:*

apereo>>phpcas>>0.5.1

cpe:2.3:a:apereo:phpcas:0.5.1:*:*:*:*:*:*:*

apereo>>phpcas>>0.6.0

cpe:2.3:a:apereo:phpcas:0.6.0:*:*:*:*:*:*:*

apereo>>phpcas>>1.0.0

cpe:2.3:a:apereo:phpcas:1.0.0:*:*:*:*:*:*:*

apereo>>phpcas>>1.0.1

cpe:2.3:a:apereo:phpcas:1.0.1:*:*:*:*:*:*:*

apereo>>phpcas>>1.1.0

cpe:2.3:a:apereo:phpcas:1.1.0:*:*:*:*:*:*:*

apereo>>phpcas>>1.1.1

cpe:2.3:a:apereo:phpcas:1.1.1:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-79	Primary	nvd@nist.gov

CWE ID: CWE-79

Type: Primary

Source: nvd@nist.gov