Security Advisory
CVE-2010-2795
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
phpCAS before 1.1.2 allows remote authenticated users to hijack sessions via a query string containing a crafted ticket value.