Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in the callback function in client.php in phpCAS before 1.1.3, when proxy mode is enabled, allows remote attackers to create or overwrite arbitrary files via directory traversal sequences in a Proxy Granting Ticket IOU (PGTiou) parameter.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Jasig phpCAS client.php文件目录遍历漏洞
Vulnerability Description
Jasig phpCAS是英国Jasig公司的一个ITS集中式认证服务（Central Authentication Service）的PHP客户端开发包。 phpCAS 1.1.3之前版本中的client.php文件中的调回函数中存在目录遍历漏洞。远程攻击者可以借助Proxy Granting Ticket IOU (PGTiou)参数中的目录遍历序列创建或者覆盖任意文件。
CVSS Information
N/A
Vulnerability Type
N/A