EUVD-2006-7030

Malware in sbrugna...

EUVD-2006-2285

Malware in sbrugna...

Claroline 1.7.5 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/29162/info Claroline is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote attacker to compromise the application and the underlying system; other...

CVE-2006-7048

CVE-2006-7048 affects Claroline 1.7.5 and involves multiple PHP remote file inclusion vulnerabilities. The issues allow remote attackers to execute arbitrary PHP code by supplying a URL in specific parameters: (1) clarolineRepositorySys to various extauth drivers (ldap.inc.php, etc.), (2) include...

CVE-2006-2284

Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 clarolineRepositorySys parameter in ldap.inc.php and the 2 claroCasLibPath parameter in casProcess.inc.php...

CVE-2006-2284

Claroline 1.7.5 is affected by multiple PHP remote file inclusion (RFI) vulnerabilities that allow an attacker to execute arbitrary PHP code via crafted URLs. The documented vectors include the clarolineRepositorySys parameter in ldap.inc.php and the claro_CasLibPath parameter in casProcess.inc.p...