Description

PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the extAuthSource[newUser] parameter.

Remediation

References

CVE-2006-4844

Related Vulnerabilities

WebLogic CVE-2021-2397 Vulnerability (CVE-2021-2397)

WordPress 5.1.x Multiple Vulnerabilities (5.1 - 5.1.8)

Phusion Passenger Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2018-12615)

Telerik Web UI Deserialization of Untrusted Data Vulnerability (CVE-2019-18935)

phpList Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-20036)

Severity

Medium

Classification

CVE-2006-4844 CWE-94

Tags

Missing Update Known Vulnerabilities