Claroline 1.7.5 - Multiple Remote File Inclusions

Claroline 1.7.5 - Multiple Remote File Inclusions source: https://www.securityfocus.com/bid/29162/info Claroline is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote attacker to compromise...

Claroline 1.7.5 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/29162/info Claroline is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote attacker to compromise the application and the underlying system; other...

Vulnerability in Claroline

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в Claroline. Уязвимость в функции goto в параметре url. XSS: http://site/claroline/document/goto/?url=3Cimg20src=''20onerror=22javascript:alertdocument.cookie223E Уязвима версия Claroline 1.8.8 и предыдущие версии...

CVE-2008-0825

SQL injection vulnerability in Claroline before 1.8.9 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in Claroline before 1.8.9 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Design/Logic Flaw

Unspecified vulnerability in the php2phps function in Claroline before 1.8.9 has unknown impact and attack vectors...

CVE-2008-0826

Cross-site scripting XSS vulnerability in Claroline before 1.8.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Claroline before 1.8.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-0824

Unspecified vulnerability in the php2phps function in Claroline before 1.8.9 has unknown impact and attack vectors...

CVE-2008-0824

Unspecified vulnerability in the php2phps function in Claroline before 1.8.9 has unknown impact and attack vectors...

CVE-2008-0826

Claroline

CVE-2008-0824

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2008-0826

Cross-site scripting XSS vulnerability in Claroline before 1.8.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-0825

Claroline before 1.8.9 contains an SQL injection vulnerability exploitable by remote attackers via unspecified vectors, allowing arbitrary SQL execution. The issue is documented across multiple sources (NVD and CVE records). No concrete exploit details, vector specifics, or patch information are ...

CVE-2008-0825

SQL injection vulnerability in Claroline before 1.8.9 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Claroline inc/lib/language.lib.php language Parameter Traversal Local File Inclusion

The version of Claroline installed on the remote host fails to sanitize user-supplied input to the 'language' parameter before using it to include PHP code in the 'loadtranslation' method in 'claroline/inc/lib/language.lib.php'. Regardless of PHP's 'registerglobals' setting, an unauthenticated,...

CVE-2007-4742

Claroline before 1.8.6 allows remote authenticated administrators to obtain sensitive information via an invalid value in the sort parameter to admin/adminusers.php, which reveals the path in an error message in some circumstances, as demonstrated by a parameter value containing an XSS sequence...

CVE-2007-4741

Cross-site scripting XSS vulnerability in admin/adminusers.php in Claroline before 1.8.6 allows remote authenticated administrators to inject arbitrary web script or HTML via the sort parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/adminusers.php in Claroline before 1.8.6 allows remote authenticated administrators to inject arbitrary web script or HTML via the sort parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party...

Design/Logic Flaw

Claroline before 1.8.6 allows remote authenticated administrators to obtain sensitive information via an invalid value in the sort parameter to admin/adminusers.php, which reveals the path in an error message in some circumstances, as demonstrated by a parameter value containing an XSS sequence...