CVE:CVE-2010-2795
CNNVD:CNNVD-201008-047
phpCAS 1.1.2之前的版本存在漏洞。远程验证用户可以借助包含特制的ticket值的查询字符串劫持进程。
solution:Upgrade joachim_fritschi phpcas to a higher version than 1.1.1,0.2,0.3,0.3.1,0.3.2,0.4,0.4.1,0.4.2,0.4.3,0.4.4,0.4.5,0.4.6,0.4.7,0.4.8,0.4.9,0.4.10,0.4.11,0.4.12,0.4.13,0.4.14,0.4.15,0.4.16,0.4.17,0.4.18,0.4.19,0.4.20,0.4.21,0.4.22,0.4.23,0.5.0,0.5.1,0.6.0,1.0.0,1.0.1,1.1.0,and avoid the version (,1.1.1],0.2,0.3,0.3.1,0.3.2,0.4,0.4.1,0.4.2,0.4.3,0.4.4,0.4.5,0.4.6,0.4.7,0.4.8,0.4.9,0.4.10,0.4.11,0.4.12,0.4.13,0.4.14,0.4.15,0.4.16,0.4.17,0.4.18,0.4.19,0.4.20,0.4.21,0.4.22,0.4.23,0.5.0,0.5.1,0.6.0,1.0.0,1.0.1,1.1.0