Unrated severityNVD Advisory· Published Aug 5, 2010· Updated Apr 29, 2026
CVE-2010-2795
CVE-2010-2795
Description
phpCAS before 1.1.2 allows remote authenticated users to hijack sessions via a query string containing a crafted ticket value.
Affected products
35cpe:2.3:a:joachim_fritschi:phpcas:*:*:*:*:*:*:*:*+ 34 more
- cpe:2.3:a:joachim_fritschi:phpcas:*:*:*:*:*:*:*:*range: <=1.1.1
- cpe:2.3:a:joachim_fritschi:phpcas:0.2:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.3:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.3.1:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.3.2:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.10:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.11:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.12:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.13:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.14:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.15:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.16:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.17:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.18:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.19:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.20:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.21:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.22:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.23:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.4:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.5:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.6:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.7:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.8:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.4.9:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.5.0:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.5.1:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:0.6.0:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:1.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:1.0.1:*:*:*:*:*:*:*
- cpe:2.3:a:joachim_fritschi:phpcas:1.1.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
19- issues.jasig.org/browse/PHPCAS-61nvdPatch
- secunia.com/advisories/40845nvdVendor Advisory
- lists.fedoraproject.org/pipermail/package-announce/2010-August/046576.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2010-August/046584.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2010-November/050415.htmlnvd
- lists.fedoraproject.org/pipermail/package-announce/2010-November/050428.htmlnvd
- secunia.com/advisories/41240nvd
- secunia.com/advisories/42149nvd
- secunia.com/advisories/42184nvd
- secunia.com/advisories/43427nvd
- www.debian.org/security/2011/dsa-2172nvd
- www.securityfocus.com/bid/42162nvd
- www.vupen.com/english/advisories/2010/2234nvd
- www.vupen.com/english/advisories/2010/2261nvd
- www.vupen.com/english/advisories/2010/2909nvd
- www.vupen.com/english/advisories/2011/0456nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/60894nvd
- forge.indepnet.net/projects/glpi/repository/revisions/12601nvd
- wiki.jasig.org/display/CASC/phpCAS+ChangeLognvd
News mentions
0No linked articles in our index yet.