Lucene search

[email protected]CVE-2006-4844

HistorySep 19, 2006 - 1:07 a.m.

CVE-2006-4844

2006-09-1901:07:00

CWE-94

[email protected]

web.nvd.nist.gov

cve-2006-4844

php

remote file inclusion

vulnerability

claroline

dokeos

extauthsource

newuser

nvd

7.6 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.074 Low

EPSS

Percentile

94.1%

JSON

PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the extAuthSource[newUser] parameter.

CPENameOperatorVersion
dokeos:open_source_learning_and_knowledge_management_tooldokeos open source learning and knowledge management tooleq1.5
claroline:clarolineclarolineeq1.7.5
dokeos:open_source_learning_and_knowledge_management_tooldokeos open source learning and knowledge management tooleq1.6_rc2
claroline:clarolineclarolineeq1.7.4
claroline:clarolineclarolineeq1.5.4
claroline:clarolineclarolineeq1.2
claroline:clarolineclarolinele1.7.7
dokeos:open_source_learning_and_knowledge_management_tooldokeos open source learning and knowledge management tooleq1.5.3
claroline:clarolineclarolineeq1.6_beta
dokeos:open_source_learning_and_knowledge_management_tooldokeos open source learning and knowledge management tooleq1.6.4

CPE	Name	Operator	Version
dokeos:open_source_learning_and_knowledge_management_tool	dokeos open source learning and knowledge management tool	eq	1.5
claroline:claroline	claroline	eq	1.7.5
dokeos:open_source_learning_and_knowledge_management_tool	dokeos open source learning and knowledge management tool	eq	1.6_rc2
claroline:claroline	claroline	eq	1.7.4
claroline:claroline	claroline	eq	1.5.4
claroline:claroline	claroline	eq	1.2
claroline:claroline	claroline	le	1.7.7
dokeos:open_source_learning_and_knowledge_management_tool	dokeos open source learning and knowledge management tool	eq	1.5.3
claroline:claroline	claroline	eq	1.6_beta
dokeos:open_source_learning_and_knowledge_management_tool	dokeos open source learning and knowledge management tool	eq	1.6.4

Rows per page:

1-10 of 261

References

secunia.com/advisories/21931

secunia.com/advisories/21948

www.claroline.net/wiki/index.php/Changelog_1.7.x#Modification_between_claroline_1.7.7_and_1.7.8

www.gulftech.org/?node=research&article_id=00112-09142006

www.gulftech.org/?node=research&article_id=00112-09142006&

www.securityfocus.com/bid/20056

www.vupen.com/english/advisories/2006/3638

www.vupen.com/english/advisories/2006/3639

exchange.xforce.ibmcloud.com/vulnerabilities/28943

7.6 High

AI Score

Confidence

Low

5.1 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

0.074 Low

EPSS

Percentile

94.1%

JSON

Related for CVE-2006-4844

exploitpack1 zdt1 nessus2 cvelist1 exploitdb1