16 matches found
CVE-2007-4741
Cross-site scripting XSS vulnerability in admin/adminusers.php in Claroline before 1.8.6 allows remote authenticated administrators to inject arbitrary web script or HTML via the sort parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...
EUVD-2008-0831
Malware in sbrugna...
EUVD-2007-4723
Malware in sbrugna...
EUVD-2007-4722
Malware in sbrugna...
EUVD-2022-39815
Malicious code in bioql PyPI...
CVE-2022-37160
Claroline 13.5.7 and prior allows an authenticated attacker to elevate privileges via the arbitrary creation of a privileged user. By combining the XSS vulnerability present in several upload forms and a javascript request to the present API, it is possible to trigger the creation of a user with...
CVE-2022-37161
Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting XSS via SVG file upload...
CVE-2022-37159
Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload...
CVE-2008-0824
Unspecified vulnerability in the php2phps function in Claroline before 1.8.9 has unknown impact and attack vectors...
CVE-2022-37161
Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting XSS via SVG file upload...
CVE-2022-37159
Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload...
Claroline < 1.7.7 - Arbitrary File Inclusion Vulnerability
Exploit for php platform in category web applications Claroline Arbitrary File Inclusion Vendor: Claroline Product: Claroline Version: 0 $uidReset = true; $clarologinSucceeded = tr...
Claroline 1.8.9 - phpBBviewtopic.php Cross-Site Scripting
Claroline 1.8.9 - phpBBviewtopic.php Cross-Site Scripting source: https://www.securityfocus.com/bid/30269/info Claroline is prone to multiple input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities. 2. A remote URI-redirection vulnerability. An attacker may leverage the...
Sql injection
SQL injection vulnerability in Claroline before 1.8.9 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...
Claroline <= 1.8.0 rc1 (import.lib.php) Remote File Include Vulnerability
Exploit for unknown platform in category web applications ========================================================================= Claroline = 1.8.0 rc1 import.lib.php Remote File Include Vulnerability ========================================================================= claroline = 180rc1...
Claroline 1.8.0 rc1 - import.lib.php Remote File Inclusion
Claroline 1.8.0 rc1 - import.lib.php Remote File Inclusion claroline = 180rc1 Remote File Inclusion Download Source : http://www.claroline.net/dlarea/claroline180rc1.tar.gz Found By : k1tk4t - k1tk4t4tnewhack.org Location : Indonesia -- newhackdotorg file ; claroline/inc/lib/import.lib.php bugs ;...