CVE-2006-1594

CVE-2006-1594 affects Claroline version 1.7.4 and earlier. The vulnerability arises in two PHP entry points: document/rqmkhtml.php (rqEditHtml command) and learnPath/include/scormExport.inc.php (includePath). The root cause is directory traversal via dot-dot sequences (