CVE-2006-4844

PHP remote file inclusion vulnerability in inc/claroinitlocal.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the extAuthSourcenewUser parameter...

CVE-2006-4844

Claroline

Claroline claro_init_local.inc.php extAuthSource[newUser] Parameter Remote File Inclusion

The remote host is running Claroline, an open source, web-based, collaborative learning environment written in PHP. The version of Claroline installed on the remote host fails to sanitize input to the 'extAuthSource' parameter array before using it to include PHP code in the...