CVE-2007-4742

Claroline before 1.8.6 allows remote authenticated administrators to obtain sensitive information via an invalid value in the sort parameter to admin/adminusers.php, which reveals the path in an error message in some circumstances, as demonstrated by a parameter value containing an XSS sequence...

CVE-2007-4741

Cross-site scripting XSS vulnerability in admin/adminusers.php in Claroline before 1.8.6 allows remote authenticated administrators to inject arbitrary web script or HTML via the sort parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-4741

CVE-2007-4741 affects Claroline prior to 1.8.6. The page admin/adminusers.php is vulnerable to cross-site scripting (XSS) via the sort parameter, allowing remote authenticated administrators to inject arbitrary web script or HTML. The vulnerability is triggered by manipulating the sort field and ...

CVE-2007-4742

CVE-2007-4742 affects Claroline prior to 1.8.6. Affected component: admin/adminusers.php sort parameter. Root cause: invalid value in sort leads to error message that may leak the file path, demonstrated by input containing an XSS sequence; authenticated remote admins can obtain sensitive informa...

Directory traversal

Directory traversal vulnerability in inc/lib/language.lib.php in Claroline before 1.8.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

CVE-2007-4718

Directory traversal vulnerability in inc/lib/language.lib.php in Claroline before 1.8.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Claroline before 1.8.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the 1 dir parameter in admin/adminusers.php, the 2 action parameter in admin/advancedUserSearch.php, and the 3 view parameter in...

CVE-2007-4717

Multiple cross-site scripting XSS vulnerabilities in Claroline before 1.8.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the 1 dir parameter in admin/adminusers.php, the 2 action parameter in admin/advancedUserSearch.php, and the 3 view parameter in...

CVE-2007-4717

Multiple cross-site scripting XSS vulnerabilities in Claroline before 1.8.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the 1 dir parameter in admin/adminusers.php, the 2 action parameter in admin/advancedUserSearch.php, and the 3 view parameter in...

CVE-2007-4718

Directory traversal vulnerability in inc/lib/language.lib.php in Claroline before 1.8.6 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter...

CVE-2007-4718

Claroline is affected by a Directory Traversal (CVE-2007-4718) in inc/lib/language.lib.php where the language parameter is unsafely used to include files. Versions before 1.8.6 are vulnerable to Local File Inclusion, allowing remote attackers to view arbitrary files or execute PHP code on the ser...

CVE-2007-4717

CVE-2007-4717 involves multiple XSS vulnerabilities in Claroline

Claroline 1.x - incliblanguage.lib.php?language Traversal Local File Inclusion

Claroline 1.x - incliblanguage.lib.php?language Traversal Local File Inclusion source: https://www.securityfocus.com/bid/25521/info Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities. An attacker could exploit these issues to execute local...

Claroline 1.x - '/admin/advancedUserSearch.php?action' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25521/info Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities. An attacker could exploit these issues to execute local script code in the context of the application and access sensitive data, which m...

Claroline 1.x - '/admin/campusProblem.php?view' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25521/info Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities. An attacker could exploit these issues to execute local script code in the context of the application and access sensitive data, which m...

Claroline 1.x - '/admin/adminusers.php?dir' Cross-Site Scripting

source: https://www.securityfocus.com/bid/25521/info Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities. An attacker could exploit these issues to execute local script code in the context of the application and access sensitive data, which m...

Claroline 1.x - '/inc/lib/language.lib.php?language' Traversal Local File Inclusion

source: https://www.securityfocus.com/bid/25521/info Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities. An attacker could exploit these issues to execute local script code in the context of the application and access sensitive data, which m...

Claroline 1.x - adminadvancedUserSearch.php?action Cross-Site Scripting

Claroline 1.x - adminadvancedUserSearch.php?action Cross-Site Scripting source: https://www.securityfocus.com/bid/25521/info Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities. An attacker could exploit these issues to execute local script...

Claroline 1.x - admincampusProblem.php?view Cross-Site Scripting

Claroline 1.x - admincampusProblem.php?view Cross-Site Scripting source: https://www.securityfocus.com/bid/25521/info Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities. An attacker could exploit these issues to execute local script code in...

Claroline 1.x - adminadminusers.php?dir Cross-Site Scripting

Claroline 1.x - adminadminusers.php?dir Cross-Site Scripting source: https://www.securityfocus.com/bid/25521/info Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities. An attacker could exploit these issues to execute local script code in the...