Skip to content
OpenAdvisories

Package · Packagist

apereo/phpcas

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 8.0
    CVE-2022-39369

    Service Hostname Discovery Exploitation in phpCAS

    phpCAS is an authentication library that allows PHP applications to easily authenticate users via a Central Authentication Service (CAS) server. The phpCAS library uses HTTP headers to determine the service URL used to validate tickets. This allows an attacke…

    Apereo phpCAS moodle ocsinventory-server Debian Ubuntu Packagist
  • Medium —
    CVE-2010-1618

    phpCAS client library and Moodle Cross-site Scripting vulnerability

    Cross-site scripting (XSS) vulnerability in the phpCAS client library before 1.1.0, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled i…

    moodle/moodle apereo/phpcas Packagist