Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.8.3 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF to 1 index.php, 2 demo/claroline170/index.php, and possibly other scripts...

CVE-2007-3517

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.8.3 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF to 1 index.php, 2 demo/claroline170/index.php, and possibly other scripts...

CVE-2007-3517

CVE-2007-3517 covers multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.3. An attacker can inject arbitrary web script or HTML by supplying malicious content through PATH_INFO (PHP_SELF) to scripts such as index.php and demo/claroline170/index.php (and potentially other scripts)...

CVE-2007-3517

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.8.3 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO PHPSELF to 1 index.php, 2 demo/claroline170/index.php, and possibly other scripts...

Claroline 1.8.3 - $_SERVER[PHP_SELF] Multiple Cross-Site Scripting Vulnerabilities

Claroline 1.8.3 - $SERVERPHPSELF Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/24742/info Claroline is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues ...

Claroline 1.8.3 - '$_SERVER['PHP_SELF']' Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/24742/info Claroline is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

claroline-rfi.txt

claroline [email protected] Homepage: http://www.MoHaNdKo.cOm Exploit:Path/claroline/inc/lib/rootSys=Shell Greetz To: Tryag-Team & AsbMay's Group & Xp10 TeAm & CiTy GhOsTs TeAm Greetz To: mY Love Dr.hacker BiG seso...

claroline <= Multiple Remote File Include Vulnerablitiy

claroline = Multiple Remote File Include Vulnerablitiy D.Script: http://www.e-learningone.it/softwarefree/e-learning/claroline175.zip Discovered by: MoHaNdKo-=-=- [email protected] Homepage: http://www.MoHaNdKo.cOm Exploit:Path/claroline/inc/lib/rootSys=Shell Greetz To: Tryag-Team & AsbMay's Gro...

Claroline 1.x - RootSys Remote File Inclusion

Claroline 1.x - RootSys Remote File Inclusion source: https://www.securityfocus.com/bid/23609/info Claroline is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and...

Claroline 1.x - RootSys Remote File Inclusion

source: https://www.securityfocus.com/bid/23609/info Claroline is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also...

CVE-2006-7048

Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 clarolineRepositorySys parameter to a atutor.inc.php b db-generic.inc.php c docebo.inc.php d dokeos.1.6.inc.php e dokeos.inc.php f ganesha.inc.php g...

CVE-2006-7048

Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 clarolineRepositorySys parameter to a atutor.inc.php b db-generic.inc.php c docebo.inc.php d dokeos.1.6.inc.php e dokeos.inc.php f ganesha.inc.php g...

CVE-2006-7048

CVE-2006-7048 affects Claroline 1.7.5 and involves multiple PHP remote file inclusion vulnerabilities. The issues allow remote attackers to execute arbitrary PHP code by supplying a URL in specific parameters: (1) clarolineRepositorySys to various extauth drivers (ldap.inc.php, etc.), (2) include...

claroline-180rc1.txt

claroline = 180rc1 Remote File Inclusion Download Source : http://www.claroline.net/dlarea/claroline180rc1.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; claroline/inc/lib/import.lib.php bugs ; begin line 8 requireonce $includePath...

CVE-2006-5256

PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter...

CVE-2006-5256

PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter...

CVE-2006-5256

CVE-2006-5256 affects Claroline 1.8.0 and earlier, where PHP remote file inclusion is possible through the includePath argument in claroline/inc/lib/import.lib.php. The underlying issue allows an attacker to execute arbitrary PHP code by supplying a URL in includePath. Public references confirm t...

claroline <= 180rc1 Remote File Inclusion

claroline = 180rc1 Remote File Inclusion Download Source : http://www.claroline.net/dlarea/claroline180rc1.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; claroline/inc/lib/import.lib.php bugs ; begin line 8 requireonce $includePath...

Claroline 1.8.0 rc1 - 'import.lib.php' Remote File Inclusion

claroline = 180rc1 Remote File Inclusion Download Source : http://www.claroline.net/dlarea/claroline180rc1.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; claroline/inc/lib/import.lib.php bugs ; begin line 8 requireonce $includePath...

Claroline 1.8.0 rc1 - import.lib.php Remote File Inclusion

Claroline 1.8.0 rc1 - import.lib.php Remote File Inclusion claroline = 180rc1 Remote File Inclusion Download Source : http://www.claroline.net/dlarea/claroline180rc1.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; claroline/inc/lib/import.lib.php bugs ;...