Description

Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) clarolineRepositorySys parameter in ldap.inc.php and the (2) claro_CasLibPath parameter in casProcess.inc.php.

Remediation

References

CVE-2006-2284

Related Vulnerabilities

Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2012-1169)

Phusion Passenger Other Vulnerability (CVE-2014-1832)

Python Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2022-48566)

XWiki Improper Encoding or Escaping of Output Vulnerability (CVE-2022-36099)

SharePoint Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2020-1103)

Severity

Medium

Classification

CVE-2006-2284

Tags

Missing Update Known Vulnerabilities