https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-17T08:08:02.527577+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certa-2010-avi-477 certa-2010-avi-477 — De multiples vulnérabilités dans <span class="textit">phpCAS</span> permettent de réaliser une injection de code indire… 2026-10-17T08:08:02.577930+00:00 certa-2010-avi-477 https://cve.radiocsirt.org/vuln/euvd-2026-120067 EUVD-2026-120067 2026-10-17T08:08:02.577992+00:00 EUVD-2026-120067 https://cve.radiocsirt.org/vuln/fkie_cve-2010-3690 fkie_cve-2010-3690 2026-10-17T08:08:02.578009+00:00

Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1.1.3, when proxy mode is enabled, allow remote attackers to inject arbitrary web script or HTML via (1) a crafted Proxy Granting Ticket IOU (PGTiou) parameter to the callback function in client.php, (2) vectors involving functions that make getCallbackURL calls, or (3) vectors involving functions that make getURL calls.

 https://cve.radiocsirt.org/vuln/ghsa-8hv6-99c4-p438 GHSA-8hv6-99c4-p438 2026-10-17T08:08:02.578041+00:00

Multiple cross-site scripting (XSS) vulnerabilities in phpCAS before 1.1.3, when proxy mode is enabled, allow remote attackers to inject arbitrary web script or HTML via (1) a crafted Proxy Granting Ticket IOU (PGTiou) parameter to the callback function in client.php, (2) vectors involving functions that make getCallbackURL calls, or (3) vectors involving functions that make getURL calls.

 https://cve.radiocsirt.org/vuln/gsd-2010-3690 gsd-2010-3690 2026-10-17T08:08:02.578059+00:00 gsd-2010-3690