CVE-2006-5256

CVE-2006-5256 affects Claroline 1.8.0 and earlier, where PHP remote file inclusion is possible through the includePath argument in claroline/inc/lib/import.lib.php. The underlying issue allows an attacker to execute arbitrary PHP code by supplying a URL in includePath. Public references confirm t...