CVE-2006-2286

CVE-2006-2286 affects Dokeos 1.6.3 and earlier and Dokeos community release 2.0.3. The issue is multiple PHP remote file inclusion in claro_init_global.inc.php, allowing an attacker to execute arbitrary PHP code by supplying a URL to several parameters (rootSys, clarolineRepositorySys, lang_path,...