PT-2022-23849 · Claroline · Claroline

Name of the Vulnerable Software and Affected Versions: Claroline versions prior to 13.5.8 Description: The issue is related to Cross Site Scripting XSS via SVG file upload. This means an attacker could potentially inject malicious scripts into the system by uploading specially crafted SVG files...

Claroline 跨站脚本漏洞

Claroline is an open source learning management system from Claroline Open Source. A cross-site scripting vulnerability exists in Claroline version 13.5.7 and prior versions, which stems from vulnerability to cross-site scripting XSS attacks. The vulnerability can be exploited to obtain javascrip...

Claroline 跨站脚本漏洞

Claroline is an open source learning management system from Claroline Open Source. A security vulnerability exists in Claroline version 13.5.7 and earlier versions. An attacker exploited the vulnerability to elevate privileges by arbitrarily creating privileged users...

PT-2022-23848 · Claroline · Claroline

Name of the Vulnerable Software and Affected Versions: Claroline versions 13.5.7 and prior Description: The issue allows an authenticated attacker to elevate privileges via the arbitrary creation of a privileged user. This can be achieved by combining an XSS vulnerability present in several uploa...

Claroline 跨站脚本漏洞

Claroline is an open source learning management system from Claroline Open Source. A security vulnerability exists in Claroline version 13.5.7 and earlier versions, which stems from a cross-site scripting XSS attack via SVG file uploads...

Claroline 代码问题漏洞

Claroline is an open source learning management system from Claroline Open Source. A security vulnerability exists in Claroline 13.5.7 and prior versions that originates from remote code execution via arbitrary file upload...

Claroline < 1.7.7 - Arbitrary File Inclusion Vulnerability

Exploit for php platform in category web applications Claroline Arbitrary File Inclusion Vendor: Claroline Product: Claroline Version: 0 $uidReset = true; $clarologinSucceeded = tr...

Claroline 1.7.7 - Arbitrary File Inclusion

Claroline 1.7.7 - Arbitrary File Inclusion Claroline Arbitrary File Inclusion Vendor: Claroline Product: Claroline Version: 0 $uidReset = true; $clarologinSucceeded = true; break; e...

Claroline < 1.7.7 - Arbitrary File Inclusion

Claroline Arbitrary File Inclusion Vendor: Claroline Product: Claroline Version: 0 $uidReset = true; $clarologinSucceeded = true; break; else $uid =...

claroline.ucaribe.edu.mx XSS vulnerability

Vulnerable URL: http://claroline.ucaribe.edu.mx/claroline/claroline/backends/download.php?url=aHR0cDovL2cuZTxzdmcgb25sb2FkPWFsZXJ0KCJYU1NQT1NFRCIpPg===true=NI0215 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:|...

tsime.uz.ac.zw XSS vulnerability

Vulnerable URL: http://tsime.uz.ac.zw/claroline/backends/download.php?url=aHR0cDovL2cuZTxzdmcgb25sb2FkPWFsZXJ0KCJYU1NQT1NFRCIpPg===true=MBA563 Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:13 GMT Vulnerability type:| XSS Vulnerability...

app.eva-sms.com XSS vulnerability

Vulnerable URL: http://app.eva-sms.com/claroline/claroline/backends/download.php?url=aHR0cDovL2cuZTxzdmcgb25sb2FkPWFsZXJ0KCJYU1NQT1NFRCIpPg===true=MMK21516 Details: Description| Value ---|--- Patched:| No Latest check for patch:| 26.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly...

fce.unal.edu.co XSS vulnerability

Vulnerable URL: http://www.fce.unal.edu.co/claroline/claroline/backends/download.php?url=aHR0cDovL2cuZTxzdmcgb25sb2FkPWFsZXJ0KCJYU1NQT1NFRCIpPg===true=2016007D6 Details: Description| Value ---|--- Patched:| Yes, at 27.07.2017 Latest check for patch:| 27.07.2017 08:12 GMT Vulnerability type:| XSS...

sspf.claroline.com XSS vulnerability

Vulnerable URL: http://sspf.claroline.com/claroline/backends/download.php?url=aHR0cDovL2cuZTxzdmcgb25sb2FkPWFsZXJ0KCJYU1NQT1NFRCIpPg===true=NEWS Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 23:11 GMT Vulnerability type:| XSS Vulnerability...

Multiple Cross-Site Scripting Vulnerabilities in Claroline (CNVD-2015-00108)

Claroline is an open source Learning Management System LMS. Versions of Claroline prior to 1.11.9 contain multiple cross-site scripting vulnerabilities that could be exploited by remote attackers to execute arbitrary web script or HTML...

CVE-2013-4753

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.11.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via 1 the Search field in an inbox action to messaging/messagebox.php, 2 the "First name" field to auth/profile.php, or 3 the Speakers field in...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.11.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via 1 the Search field in an inbox action to messaging/messagebox.php, 2 the "First name" field to auth/profile.php, or 3 the Speakers field in...

CVE-2013-4753

Multiple cross-site scripting XSS vulnerabilities in Claroline 1.11.9 and earlier allow remote authenticated users to inject arbitrary web script or HTML via 1 the Search field in an inbox action to messaging/messagebox.php, 2 the "First name" field to auth/profile.php, or 3 the Speakers field in...

CVE-2013-4753

CVE-2013-4753 affects Claroline 1.11.9 and earlier. The vulnerability is multiple XSS flaws triggered by user input in three fields: (1) Search in inbox (messaging/messagebox.php), (2) First name in auth/profile.php, (3) Speakers in rqAdd action (calendar/agenda.php). The root cause is improper h...

Claroline 1.8.9 work/work.php URL XSS

No description provided by source. source: http://www.securityfocus.com/bid/30269/info Claroline is prone to multiple input-validation vulnerabilities: 1. Multiple cross-site scripting vulnerabilities. 2. A remote URI-redirection vulnerability. An attacker may leverage these issues to execute...