CVE-2010-3691: Apereo Phpcas

Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days.

PGTStorage/pgt-file.php in phpCAS before 1.1.3, when proxy mode is enabled, allows local users to overwrite arbitrary files via a symlink attack on an unspecified file.

Affected products

• Apereo Phpcas: up to and including 1.1.2; version 0.2 only; version 0.3 only; version 0.3.1 only; version 0.3.2 only; version 0.4 only; …

Published 2010-10-07. Last modified 2026-06-16.