Search...

Claroline 1.x admin/campusProblem.php view Parameter XSS

2014-07-01T00:00:00

ID SSV:83935
Type seebug
Reporter Root
Modified 2014-07-01T00:00:00

Description

No description provided by source.

                                        
                                            
                                                source: http://www.securityfocus.com/bid/25521/info
   
Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities.
   
An attacker could exploit these issues to execute local script code in the context of the application and access sensitive data, which may aid in further attacks.The attacker may also be able to execute arbitray code in the context of the webserver. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
Versions prior to Claroline 1.8.6 are vulnerable. 

http://www.example.com/admin/campusProblem.php?view=[XSS]

JSON Vulners Source

Initial Source

{"href": "https://www.seebug.org/vuldb/ssvid-83935", "status": "cve,poc", "bulletinFamily": "exploit", "modified": "2014-07-01T00:00:00", "title": "Claroline 1.x admin/campusProblem.php view Parameter XSS", "cvss": {"vector": "NONE", "score": 0.0}, "sourceHref": "https://www.seebug.org/vuldb/ssvid-83935", "cvelist": [], "description": "No description provided by source.", "viewCount": 2, "published": "2014-07-01T00:00:00", "sourceData": "\n source: http://www.securityfocus.com/bid/25521/info\r\n \r\nClaroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities.\r\n \r\nAn attacker could exploit these issues to execute local script code in the context of the application and access sensitive data, which may aid in further attacks.The attacker may also be able to execute arbitray code in the context of the webserver. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.\r\n \r\nVersions prior to Claroline 1.8.6 are vulnerable. \r\n\r\nhttp://www.example.com/admin/campusProblem.php?view=[XSS] \n ", "id": "SSV:83935", "enchantments_done": [], "type": "seebug", "lastseen": "2017-11-19T16:55:29", "reporter": "Root", "enchantments": {"score": {"value": 0.1, "vector": "NONE", "modified": "2017-11-19T16:55:29", "rev": 2}, "dependencies": {"references": [], "modified": "2017-11-19T16:55:29", "rev": 2}, "vulnersScore": 0.1}, "references": []}