Description
Cross-site scripting (XSS) vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attackers to read arbitrary files via ".." sequences in the file parameter in a rqEditHtml command.
Remediation
References
Related Vulnerabilities
Sqlite Incorrect Conversion between Numeric Types Vulnerability (CVE-2019-19317)
WordPress Plugin Theme Editor Multiple Vulnerabilities (2.1)
Moodle Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2024-48896)
WordPress Plugin Form Manager Remote Command Execution (1.7.2)
WordPress Plugin Contact Form 7 Arbitrary File Upload (3.5.2)