CVE-2010-1618

Published: Apr 29, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Cross-site scripting (XSS) vulnerability in the phpCAS client library before 1.1.0, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled in an error message.

Affected (20)

Products: Ja Sig: Phpcas Client Library · Moodle: Moodle

Ja Sig

1 product

Phpcas Client Library

Moodle

1 product

Moodle

Configuration B

20 vulnerable

Vulnerable Software	Affected Versions
Ja Sig Phpcas Client Library	Version 1.0.0
Ja Sig Phpcas Client Library	Version 1.0.1
Moodle Moodle	Version 1.8.10
Moodle Moodle	Version 1.8.11
Moodle Moodle	Version 1.8.1
Moodle Moodle	Version 1.8.2
Moodle Moodle	Version 1.8.3
Moodle Moodle	Version 1.8.4
Moodle Moodle	Version 1.8.5
Moodle Moodle	Version 1.8.6
Moodle Moodle	Version 1.8.7
Moodle Moodle	Version 1.8.8
Moodle Moodle	Version 1.8.9
Moodle Moodle	Version 1.9.1
Moodle Moodle	Version 1.9.2
Moodle Moodle	Version 1.9.3
Moodle Moodle	Version 1.9.4
Moodle Moodle	Version 1.9.5
Moodle Moodle	Version 1.9.6
Moodle Moodle	Version 1.9.7