CVE-2006-2868

CVE-2006-2868 : In Claroline 1.7.6, multiple PHP remote file inclusion vulnerabilities allow an attacker to execute arbitrary PHP code by supplying a URL in the includePath cookie that references one of two driver files, mambo.inc.php or postnuke.inc.php. This can enable arbitrary code execution ...