CVE Database · CVE-2010-3691
CVSS v3.1
N/A
EPSS
0.35%
Published
Oct 7, 2010
Modified
Apr 28, 2026
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
PGTStorage/pgt-file.php in phpCAS before 1.1.3, when proxy mode is enabled, allows local users to overwrite arbitrary files via a symlink attack on an unspecified file.
Weaknesses (CWE)
Affected Products (30)
References (20)