Description
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary PHP code via unknown vectors.
Remediation
References
Related Vulnerabilities
WordPress Plugin wpForo Forum Cross-Site Scripting (2.1.8)
SharePoint CVE-2020-1502 Vulnerability (CVE-2020-1502)
WordPress Plugin Product Catalog Privilege Escalation (3.8.1)
MediaWiki Other Vulnerability (CVE-2005-0536)
Oracle JRE Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-10356)