Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2010-2795
phpCAS before 1.1.2 allows remote authenticated users to hijack sessions via a query string containing a crafted ticket value.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.006
EPSS Ranking
67.9%
CVSS Severity
CVSS v2 Score
4.0
References
http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046576.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046584.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050415.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050428.html
http://secunia.com/advisories/40845
http://secunia.com/advisories/41240
http://secunia.com/advisories/42149
http://secunia.com/advisories/42184
http://secunia.com/advisories/43427
http://www.debian.org/security/2011/dsa-2172
http://www.securityfocus.com/bid/42162
http://www.vupen.com/english/advisories/2010/2234
http://www.vupen.com/english/advisories/2010/2261
http://www.vupen.com/english/advisories/2010/2909
http://www.vupen.com/english/advisories/2011/0456
https://exchange.xforce.ibmcloud.com/vulnerabilities/60894
https://forge.indepnet.net/projects/glpi/repository/revisions/12601
https://issues.jasig.org/browse/PHPCAS-61
https://wiki.jasig.org/display/CASC/phpCAS+ChangeLog
http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046576.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-August/046584.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050415.html
http://lists.fedoraproject.org/pipermail/package-announce/2010-November/050428.html
http://secunia.com/advisories/40845
http://secunia.com/advisories/41240
http://secunia.com/advisories/42149
http://secunia.com/advisories/42184
http://secunia.com/advisories/43427
http://www.debian.org/security/2011/dsa-2172
http://www.securityfocus.com/bid/42162
http://www.vupen.com/english/advisories/2010/2234
http://www.vupen.com/english/advisories/2010/2261
http://www.vupen.com/english/advisories/2010/2909
http://www.vupen.com/english/advisories/2011/0456
https://exchange.xforce.ibmcloud.com/vulnerabilities/60894
https://forge.indepnet.net/projects/glpi/repository/revisions/12601
https://issues.jasig.org/browse/PHPCAS-61
https://wiki.jasig.org/display/CASC/phpCAS+ChangeLog
Products affected by CVE-2010-2795
Joachim Fritschi
»
Phpcas
»
Version:
Any
cpe:2.3:a:joachim_fritschi:phpcas:*
Joachim Fritschi
»
Phpcas
»
Version:
0.2
cpe:2.3:a:joachim_fritschi:phpcas:0.2
Joachim Fritschi
»
Phpcas
»
Version:
0.3
cpe:2.3:a:joachim_fritschi:phpcas:0.3
Joachim Fritschi
»
Phpcas
»
Version:
0.3.1
cpe:2.3:a:joachim_fritschi:phpcas:0.3.1
Joachim Fritschi
»
Phpcas
»
Version:
0.3.2
cpe:2.3:a:joachim_fritschi:phpcas:0.3.2
Joachim Fritschi
»
Phpcas
»
Version:
0.4
cpe:2.3:a:joachim_fritschi:phpcas:0.4
Joachim Fritschi
»
Phpcas
»
Version:
0.4.1
cpe:2.3:a:joachim_fritschi:phpcas:0.4.1
Joachim Fritschi
»
Phpcas
»
Version:
0.4.10
cpe:2.3:a:joachim_fritschi:phpcas:0.4.10
Joachim Fritschi
»
Phpcas
»
Version:
0.4.11
cpe:2.3:a:joachim_fritschi:phpcas:0.4.11
Joachim Fritschi
»
Phpcas
»
Version:
0.4.12
cpe:2.3:a:joachim_fritschi:phpcas:0.4.12
Joachim Fritschi
»
Phpcas
»
Version:
0.4.13
cpe:2.3:a:joachim_fritschi:phpcas:0.4.13
Joachim Fritschi
»
Phpcas
»
Version:
0.4.14
cpe:2.3:a:joachim_fritschi:phpcas:0.4.14
Joachim Fritschi
»
Phpcas
»
Version:
0.4.15
cpe:2.3:a:joachim_fritschi:phpcas:0.4.15
Joachim Fritschi
»
Phpcas
»
Version:
0.4.16
cpe:2.3:a:joachim_fritschi:phpcas:0.4.16
Joachim Fritschi
»
Phpcas
»
Version:
0.4.17
cpe:2.3:a:joachim_fritschi:phpcas:0.4.17
Joachim Fritschi
»
Phpcas
»
Version:
0.4.18
cpe:2.3:a:joachim_fritschi:phpcas:0.4.18
Joachim Fritschi
»
Phpcas
»
Version:
0.4.19
cpe:2.3:a:joachim_fritschi:phpcas:0.4.19
Joachim Fritschi
»
Phpcas
»
Version:
0.4.2
cpe:2.3:a:joachim_fritschi:phpcas:0.4.2
Joachim Fritschi
»
Phpcas
»
Version:
0.4.20
cpe:2.3:a:joachim_fritschi:phpcas:0.4.20
Joachim Fritschi
»
Phpcas
»
Version:
0.4.21
cpe:2.3:a:joachim_fritschi:phpcas:0.4.21
Joachim Fritschi
»
Phpcas
»
Version:
0.4.22
cpe:2.3:a:joachim_fritschi:phpcas:0.4.22
Joachim Fritschi
»
Phpcas
»
Version:
0.4.23
cpe:2.3:a:joachim_fritschi:phpcas:0.4.23
Joachim Fritschi
»
Phpcas
»
Version:
0.4.3
cpe:2.3:a:joachim_fritschi:phpcas:0.4.3
Joachim Fritschi
»
Phpcas
»
Version:
0.4.4
cpe:2.3:a:joachim_fritschi:phpcas:0.4.4
Joachim Fritschi
»
Phpcas
»
Version:
0.4.5
cpe:2.3:a:joachim_fritschi:phpcas:0.4.5
Joachim Fritschi
»
Phpcas
»
Version:
0.4.6
cpe:2.3:a:joachim_fritschi:phpcas:0.4.6
Joachim Fritschi
»
Phpcas
»
Version:
0.4.7
cpe:2.3:a:joachim_fritschi:phpcas:0.4.7
Joachim Fritschi
»
Phpcas
»
Version:
0.4.8
cpe:2.3:a:joachim_fritschi:phpcas:0.4.8
Joachim Fritschi
»
Phpcas
»
Version:
0.4.9
cpe:2.3:a:joachim_fritschi:phpcas:0.4.9
Joachim Fritschi
»
Phpcas
»
Version:
0.5.0
cpe:2.3:a:joachim_fritschi:phpcas:0.5.0
Joachim Fritschi
»
Phpcas
»
Version:
0.5.1
cpe:2.3:a:joachim_fritschi:phpcas:0.5.1
Joachim Fritschi
»
Phpcas
»
Version:
0.6.0
cpe:2.3:a:joachim_fritschi:phpcas:0.6.0
Joachim Fritschi
»
Phpcas
»
Version:
1.0.0
cpe:2.3:a:joachim_fritschi:phpcas:1.0.0
Joachim Fritschi
»
Phpcas
»
Version:
1.0.1
cpe:2.3:a:joachim_fritschi:phpcas:1.0.1
Joachim Fritschi
»
Phpcas
»
Version:
1.1.0
cpe:2.3:a:joachim_fritschi:phpcas:1.1.0
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved