CVE-2010-1618

NameCVE-2010-1618
DescriptionCross-site scripting (XSS) vulnerability in the phpCAS client library before 1.1.0, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled in an error message.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
ReferencesDSA-2115-1
NVD severitymedium
Debian Bugs495542, 574757

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
glpisource(unstable)(unfixed)unimportant
libphp-casITP495542
moodlesourcelenny1.8.13-1DSA-2115-1
moodlesource(unstable)1.9.8-1low574757

Notes

Only supported behind an authenticated HTTP zone

Search for package or bug name: Reporting problems