Description
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) clarolineRepositorySys parameter in ldap.inc.php and the (2) claro_CasLibPath parameter in casProcess.inc.php.
Remediation
References
Related Vulnerabilities
Pega Infinity Improper Privilege Management Vulnerability (CVE-2020-15390)
WordPress Plugin Toggle The Title Cross-Site Scripting (1.4)
Apache Tomcat Other Vulnerability (CVE-2002-2009)
CrushFTP Server Unprotected Alternate Channel Vulnerability (CVE-2025-54309)
WordPress 3.9.x Denial of Service Vulnerability (3.9 - 3.9.23)