Lucene search

[email protected]CVE-2006-1596

HistoryApr 03, 2006 - 10:04 a.m.

CVE-2006-1596

2006-04-0310:04:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

php

remote file inclusion

vulnerability

claroline 1.7.4

nvd

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.043 Low

EPSS

Percentile

92.3%

JSON

PHP remote file inclusion vulnerability in learnPath/include/scormExport.inc.php in Claroline 1.7.4 and earlier allows remote attackers to execute arbitrary PHP code via the includePath parameter.

CPENameOperatorVersion
claroline:clarolineclarolineeq1.7.4
claroline:clarolineclarolineeq1.5.4
claroline:clarolineclarolineeq1.6_beta
claroline:clarolineclarolineeq1.6_rc1
claroline:clarolineclarolineeq1.5
claroline:clarolineclarolineeq1.6
claroline:clarolineclarolineeq1.5.3
claroline:clarolineclarolineeq1.7.2

CPE	Name	Operator	Version
claroline:claroline	claroline	eq	1.7.4
claroline:claroline	claroline	eq	1.5.4
claroline:claroline	claroline	eq	1.6_beta
claroline:claroline	claroline	eq	1.6_rc1
claroline:claroline	claroline	eq	1.5
claroline:claroline	claroline	eq	1.6
claroline:claroline	claroline	eq	1.5.3
claroline:claroline	claroline	eq	1.7.2

References

archives.neohapsis.com/archives/fulldisclosure/2006-03/1888.html

retrogod.altervista.org/claroline_174_incl_xpl.html

secunia.com/advisories/19461

www.osvdb.org/24286

www.securityfocus.com/bid/17341

www.vupen.com/english/advisories/2006/1187

exchange.xforce.ibmcloud.com/vulnerabilities/25563

www.exploit-db.com/exploits/1627

7.8 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.043 Low

EPSS

Percentile

92.3%

JSON

Related for CVE-2006-1596

prion1 cvelist1 nessus1