CVE-2006-1595: Undefined Security Weakness

Cross-site scripting XSS vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attackers to read arbitrary files via ".." sequences in the file parameter in a rqEditHtml command...