CVE-2006-2286

Multiple PHP remote file inclusion vulnerabilities in claroinitglobal.inc.php in Dokeos 1.6.3 and earlier, and Dokeos community release 2.0.3, allow remote attackers to execute arbitrary PHP code via a URL in the 1 rootSys and 2 clarolineRepositorySys parameters, and possibly the 3 langpath, 4...

CVE-2006-2286

CVE-2006-2286 affects Dokeos 1.6.3 and earlier and Dokeos community release 2.0.3. The issue is multiple PHP remote file inclusion in claro_init_global.inc.php, allowing an attacker to execute arbitrary PHP code by supplying a URL to several parameters (rootSys, clarolineRepositorySys, lang_path,...