CVE-2006-1595

CVE-2006-1595 describes a cross-site scripting (XSS) vulnerability in Claroline 1.7.4 and earlier, affecting the file document/rqmkhtml.php via the rqEditHtml command. The flaw lets remote attackers read arbitrary files by supplying ".." sequences in the file parameter, effectively enabling path ...

CVE-2006-1595

Cross-site scripting XSS vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attackers to read arbitrary files via ".." sequences in the file parameter in a rqEditHtml command...

CVE-2006-1596

PHP remote file inclusion vulnerability in learnPath/include/scormExport.inc.php in Claroline 1.7.4 and earlier allows remote attackers to execute arbitrary PHP code via the includePath parameter...

CVE-2006-1594

Multiple directory traversal vulnerabilities in document/rqmkhtml.php in Claroline 1.7.4 and earlier allow remote attackers to use ".." dot dot sequences to 1 read arbitrary files via the file parameter in a rqEditHtml command to document/rqmkhtml.php or 2 execute arbitrary code via the includePa...

CVE-2006-1596

CVE-2006-1596 is a PHP remote file inclusion vulnerability affecting Claroline 1.7.4 and earlier. The issue resides in learnPath/include/scormExport.inc.php where the includePath parameter can be manipulated to cause the application to include arbitrary PHP files, enabling remote code execution. ...

CVE-2006-1594

CVE-2006-1594 affects Claroline version 1.7.4 and earlier. The vulnerability arises in two PHP entry points: document/rqmkhtml.php (rqEditHtml command) and learnPath/include/scormExport.inc.php (includePath). The root cause is directory traversal via dot-dot sequences (

Claroline Multiple RemoteVulnerabilities (RFI, Traversal, XSS)

The remote host is running Claroline, an open source, web-based, collaborative learning environment written in PHP. The version of Claroline installed on the remote host fails to sanitize input to the 'includePath' parameter before using it in the 'claroline/learnPath/include/scormExport.inc.php'...

Claroline 1.x - rqmkhtml.php Information Disclosure

Claroline 1.x - rqmkhtml.php Information Disclosure source: https://www.securityfocus.com/bid/17343/info Claroline is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this...

Claroline 1.x - rqmkhtml.php Cross-Site Scripting

Claroline 1.x - rqmkhtml.php Cross-Site Scripting source: https://www.securityfocus.com/bid/17344/info Claroline is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to hav...

Claroline 1.x - 'rqmkhtml.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/17344/info Claroline is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser of...

Claroline 1.x - 'rqmkhtml.php' Information Disclosure

source: https://www.securityfocus.com/bid/17343/info Claroline is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerabl...

Claroline 1.7.4 - scormExport.inc.php Remote Code Execution

Claroline 1.7.4 - scormExport.inc.php Remote Code Execution !/usr/bin/php -q -d shortopentag=on works with registerglobals = On & allowurlfopen = On\r\n\r\n"; echo "dork: "Powered by Claroline" -demo\r\n\r\n"; if $argc5 echo "Usage: php ".$argv0." host path location OPTIONS\r\n"; echo "host:...

Claroline <= 1.7.4 (scormExport.inc.php) Remote Code Execution Exploit

Exploit for unknown platform in category web applications ====================================================================== Claroline works with registerglobals = On & allowurlfopen = On\r\n\r\n"; echo "dork: "Powered by Claroline" -demo\r\n\r\n"; if $argc5 echo "Usage: php ".$argv0." host...

Claroline 1.7.4 - 'scormExport.inc.php' Remote Code Execution

!/usr/bin/php -q -d shortopentag=on works with registerglobals = On & allowurlfopen = On\r\n\r\n"; echo "dork: "Powered by Claroline" -demo\r\n\r\n"; if $argc5 echo "Usage: php ".$argv0." host path location OPTIONS\r\n"; echo "host: target server ip/hostname\r\n"; echo "path: path to...

CVE-2006-0411

claroinitlocal.inc.php in Claroline 1.7.2 uses guessable session cookies MD5 hash of connection time, which allows remote attackers to hijack sessions and possibly gain administrative privileges...

Session fixation

claroinitlocal.inc.php in Claroline 1.7.2 uses guessable session cookies MD5 hash of connection time, which allows remote attackers to hijack sessions and possibly gain administrative privileges...

CVE-2006-0411

claroinitlocal.inc.php in Claroline 1.7.2 uses guessable session cookies MD5 hash of connection time, which allows remote attackers to hijack sessions and possibly gain administrative privileges...

CVE-2006-0411

CVE-2006-0411 concerns claro_init_local.inc.php in Claroline 1.7.2, where the application uses guessable session cookies (MD5 hash of connection time). This leads to session hijacking and may allow remote attackers to gain administrative privileges. The connected documents confirm the component/f...

Claroline 1.7.2, sso identification vulnerability

hi, this is what we can read in file "/claroline/inc/claroinitlocal.inc.php" : ... $ssoCookieValue = md5 mktime ; $sql = "UPDATE ".$tblsso." SET cookie = '".$ssoCookieValue."', rectime = NOW WHERE userid = ". int $uid; $affectedRowCount = clarosqlqueryaffectedrows$sql; if $affectedRowCount 1 $sql...

CVE-2005-2598

CVE-2005-2598 affects Dokeos 1.6 and earlier, and possibly Claroline. The issue consists of multiple directory traversal vulnerabilities that allow remote attackers to (1) delete arbitrary files or directories via the delete parameter to claroline/scorm/scormdocument.php, (2) move arbitrary files...