Description

Cross-site scripting (XSS) vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attackers to read arbitrary files via ".." sequences in the file parameter in a rqEditHtml command.

Remediation

References

CVE-2006-1595

Related Vulnerabilities

WordPress Plugin Contact Form by BestWebSoft Cross-Site Scripting (4.0.1)

MediaWiki Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2009-0737)

WordPress Plugin Gallery by BestWebSoft Cross-Site Scripting (4.2.1)

WordPress 5.8.x Multiple Vulnerabilities (5.8 - 5.8.8)

Oracle Application Server CVE-2009-1017 Vulnerability (CVE-2009-1017)

Severity

Medium

Classification

CVE-2006-1595

Tags

Missing Update Known Vulnerabilities