QwikSec

Security Database

CVE

CWE

Training

CVE-2010-1618

Published: Apr 29, 2010

Modified: Aug 7, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in the phpCAS client library before 1.1.0, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled in an error message.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://www.ja-sig.org/wiki/display/CASC/phpCAS+ChangeLog

x_refsource_CONFIRM

vdb-entry

x_refsource_VUPEN

http://moodle.org/security/

x_refsource_CONFIRM

SUSE-SR:2010:011

vendor-advisory

x_refsource_SUSE

http://www.ja-sig.org/issues/browse/PHPCAS-52

x_refsource_CONFIRM

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.