Claroline claro_init_local.inc.php extAuthSource[newUser] Parameter Remote File Inclusion

The remote host is running Claroline, an open source, web-based, collaborative learning environment written in PHP. The version of Claroline installed on the remote host fails to sanitize input to the 'extAuthSource' parameter array before using it to include PHP code in the...

CVE-2006-0411: Undefined Security Weakness

claroinitlocal.inc.php in Claroline 1.7.2 uses guessable session cookies MD5 hash of connection time, which allows remote attackers to hijack sessions and possibly gain administrative privileges...