EUVD-2007-4699

Malware in sbrugna...

EUVD-2008-3303

Malware in sbrugna...

EUVD-2008-3249

Malware in sbrugna...

EUVD-2006-2285

Malware in sbrugna...

EUVD-2009-1902

Malware in sbrugna...

EUVD-2008-3248

Malware in sbrugna...

EUVD-2008-0832

Malware in sbrugna...

EUVD-2005-1379

Malware in sbrugna...

EUVD-2007-4722

Malware in sbrugna...

EUVD-2022-39814

Malicious code in bioql PyPI...

EUVD-2022-39815

Malicious code in bioql PyPI...

CVE-2022-37160

Claroline 13.5.7 and prior allows an authenticated attacker to elevate privileges via the arbitrary creation of a privileged user. By combining the XSS vulnerability present in several upload forms and a javascript request to the present API, it is possible to trigger the creation of a user with...

CVE-2022-37161

Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting XSS via SVG file upload...

CVE-2022-37159

Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload...

CVE-2011-3716

Claroline 1.9.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by work/connector/linker.cnr.php and certain other files...

CVE-2006-7048

Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 clarolineRepositorySys parameter to a atutor.inc.php b db-generic.inc.php c docebo.inc.php d dokeos.1.6.inc.php e dokeos.inc.php f ganesha.inc.php g...

CVE-2008-0824

Unspecified vulnerability in the php2phps function in Claroline before 1.8.9 has unknown impact and attack vectors...

SUSE CVE-2005-1374

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to inject arbitrary web script or HTML via 1 exerciseresult.php, 2 exercicesubmit.php, 3 agenda.php, 4 learningPathList.php, 5 learningPathAdmin.php, 6...

SUSE CVE-2006-3257

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via unspecified attack vectors, possibly including 1 calendar/myagenda.php, 2 document/document.php, 3 phpbb/newtopic.php, 4 tracking/userLog.php, and 5 wiki/page.php...

CVE-2022-37159

Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload...