CVE-2007-4741

CVE-2007-4741 affects Claroline prior to 1.8.6. The page admin/adminusers.php is vulnerable to cross-site scripting (XSS) via the sort parameter, allowing remote authenticated administrators to inject arbitrary web script or HTML. The vulnerability is triggered by manipulating the sort field and ...

CVE-2007-4741: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/adminusers.php in Claroline before 1.8.6 allows remote authenticated administrators to inject arbitrary web script or HTML via the sort parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

CVE-2007-4742: Improper Input Validation

Claroline before 1.8.6 allows remote authenticated administrators to obtain sensitive information via an invalid value in the sort parameter to admin/adminusers.php, which reveals the path in an error message in some circumstances, as demonstrated by a parameter value containing an XSS sequence...

CVE-2007-4717: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Claroline before 1.8.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the 1 dir parameter in admin/adminusers.php, the 2 action parameter in admin/advancedUserSearch.php, and the 3 view parameter in...