Joachim Fritschi Phpcas vulnerabilities

2 vulnerabilities

Known vulnerabilities in Joachim Fritschi Phpcas, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

2.6CVE-2010-2796joachim_fritschiphpcas
EPSS score
2.52%
Cross-site scripting (XSS) vulnerability in phpCAS before 1.1.2, when proxy mode is enabled, allows remote attackers to inject arbitrary web script or HTML via a callback URL.4CVE-2010-2795joachim_fritschiphpcas
EPSS score
2.26%
phpCAS before 1.1.2 allows remote authenticated users to hijack sessions via a query string containing a crafted ticket value.