CVE-2010-2796
Cross-site scripting (XSS) vulnerability in phpCAS before 1.1.2, when proxy mode is enabled, allows remote attackers to inject arbitrary web script or HTML via a callback URL.
Date published : 2010-08-05
http://www.securityfocus.com/bid/42160
https://forge.indepnet.net/projects/glpi/repository/revisions/12601