CVE-2006-0411

CVE-2006-0411 concerns claro_init_local.inc.php in Claroline 1.7.2, where the application uses guessable session cookies (MD5 hash of connection time). This leads to session hijacking and may allow remote attackers to gain administrative privileges. The connected documents confirm the component/f...