357 matches found
CVE-2005-2598
Multiple directory traversal vulnerabilities in Dokeos 1.6 and earlier, and possibly Claroline, allow remote attackers to 1 delete arbitrary files or directories via the delete parameter to claroline/scorm/scormdocument.php, 2 move arbitrary files via the moveto and movefile parameters to...
CVE-2005-2598
CVE-2005-2598 affects Dokeos 1.6 and earlier, and possibly Claroline. The issue consists of multiple directory traversal vulnerabilities that allow remote attackers to (1) delete arbitrary files or directories via the delete parameter to claroline/scorm/scormdocument.php, (2) move arbitrary files...
clarolineTraverse.txt
Product description: Claroline http://www.claroline.net is a free application based on PHP /MySQL. It's a collaborative learning environment allowing teachers or education institutions to create and administer courses through the web. Vulnerability: Claroline 1.6.1 is vulnerable to multiple...
clarolineVulns.txt
This is a multi-part message in MIME format. ------=NextPart000001B01C54B56.DF10D4A0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Zone-H Research Center Security Advisory 200501 http://fr.zone-h.org Date of release: 27/04/2005 Software: Claroline...
claroline16.txt
Alphaprogrammer , Oilkarchack , DrCephaleX , Str0ke And Iranian Hacking & Security Teams : IHS TeaM , alphaST , Shabgard Security Team , Emperor Hacking Team , Crouz Security Team & Simorgh-ev Security Team Config : please replace your address : $url = "http:///www.example.com"; Please replace yo...
[EXPL] Claroline E-Learning Application Remote SQL Injection (Exploit 2)
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
[EXPL] Claroline E-Learning Application Remote SQL Injection
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
Claroline E-Learning 1.6 - Remote Hash SQL Injection (2)
Claroline E-Learning 1.6 - Remote Hash SQL Injection 2 !/usr/bin/perl Claroline E-Learning Application Remote SQL Exploit K-C0d3r This tools and to consider only himself to educational purpose Bug discovered by Greetz to mZ, 2b TUBE, off, rikky, str0ke, x0n3-h4ck, MWC K-C0d3r use IO::Socket; sub...
Claroline e-Learning <= 1.6 Remote Hash SQL Injection Exploit (2)
Exploit for unknown platform in category web applications ================================================================= Claroline e-Learning \n"; print STDERR "Targets:\n1 - userInfo.php\n"; print STDERR "2 - exercisesdetails.php\n"; exit; if @ARGV 3 Usage; if @ARGV == 3 $host = @ARGV0; $path...
Claroline E-Learning 1.6 - Remote Hash SQL Injection (2)
!/usr/bin/perl Claroline E-Learning Application Remote SQL Exploit K-C0d3r This tools and to consider only himself to educational purpose Bug discovered by Greetz to mZ, 2b TUBE, off, rikky, str0ke, x0n3-h4ck, MWC K-C0d3r use IO::Socket; sub Usage print STDERR "Usage: KCcol-xpl.pl \n"; print STDE...
Claroline e-Learning <= 1.6 Remote Hash SQL Injection Exploit
No description provided by source. ?php T r a p - S e t U n d e r g r o u n d H a c k i n g T e a m Vulnerable: Claroline E-Learning Application Exploit By : MHp0rtal Discovered By: Sieg Fried Gr33tz To == Alphaprogrammer , Oilkarchack , DrCephaleX , Str0ke And Iranian Hacking & Security Teams :...
Claroline e-Learning <= 1.6 Remote Hash SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================= Claroline e-Learning Alphaprogrammer , Oilkarchack , DrCephaleX , Str0ke And Iranian Hacking & Security Teams : IHS TeaM , alphaST , Shabgard Security Team , Emperor Hacking Tea...
Claroline E-Learning 1.6 - Remote Hash SQL Injection (1)
Alphaprogrammer , Oilkarchack , DrCephaleX , Str0ke And Iranian Hacking & Security Teams : IHS TeaM , alphaST , Shabgard Security Team , Emperor Hacking Team , Crouz Security Team & Simorgh-ev Security Team Config : please replace your address : $url = "http:///www.example.com"; Please replace yo...
[Full-disclosure] Dokeos - Multiple Vulnerabilities
2 months ago we published an advisory about the Claroline application: http://www.zone-h.org/advisories/read/id=7472 Dokeos www.dokeos.com 1.5.5 has the same vulnerabilities than Claroline because it was based on it, but not all of them: there are 3 file inclusion vulnerabilities, and some of the...
CVE-2005-1376
Multiple directory traversal vulnerabilities in 1 document.php or 2 insertMyDoc.php in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote project administrators to upload arbitrary files...
CVE-2005-1375
Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary SQL commands via 1 learningPath.php, 2 learningPathAdmin.php, 3 learnPathdetails.php, 4 modulespool.php, 5 module.php, 6 uInfo parameter in...
CVE-2005-1374
Multiple cross-site scripting XSS vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to inject arbitrary web script or HTML via 1 exerciseresult.php, 2 exercicesubmit.php, 3 agenda.php, 4 learningPathList.php, 5 learningPathAdmin.php, 6...
CVE-2005-1377
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary PHP code via unknown vectors...
CVE-2005-1375
Technical details about CVE-2005-1375 are not publicly provided in the supplied connected documents. Monitor for updates from authoritative advisories; the available sources only reiterate the existence of SQL injection vulnerabilities without specifics.
CVE-2005-1376
CVE-2005-1376 concerns Claroline versions 1.5.3 through 1.6 RC1 (and potentially Dokeos) with multiple directory traversal vulnerabilities that allow remote project administrators to upload arbitrary files via (1) document.php and (2) insertMyDoc.php. Connected sources corroborate traversal in cl...