CVE-2010-1618

The CVE-2010-1618 issue is a Cross-site Scripting (XSS) vulnerability in the phpCAS client library (pre-1.1.0) used by Moodle 1.8.x and 1.9.x series, where a crafted URL can inject script/HTML due to improper handling in an error message. Affected stack examples include Moodle 1.8.x before 1.8.12...

CVE-2010-1618: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the phpCAS client library before 1.1.0, as used in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8, allows remote attackers to inject arbitrary web script or HTML via a crafted URL, which is not properly handled in an error message...