Description

Cross-site scripting (XSS) vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attackers to read arbitrary files via ".." sequences in the file parameter in a rqEditHtml command.

Remediation

References

CVE-2006-1595

Related Vulnerabilities

SharePoint Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-0931)

WordPress Plugin SEO-Dashboard by gutewebsites.de Cross-Site Scripting (1.2.5)

WordPress Plugin Advance Menu Manager Cross-Site Request Forgery (2.9.6)

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-44949)

WordPress Plugin Product Catalog PHP Object Injection (4.2.25)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2006-1595