Description

Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) clarolineRepositorySys parameter in ldap.inc.php and the (2) claro_CasLibPath parameter in casProcess.inc.php.

Remediation

References

CVE-2006-2284

Related Vulnerabilities

WordPress Plugin Aoi Tori Cross-Site Scripting (1.1)

WordPress Plugin Category Grid View Gallery TimThumb Arbitrary File Upload (0.1.1)

WordPress Plugin Appointments Cross-Site Scripting (2.2.2.2)

WordPress Plugin ShiftNav-Responsive Mobile Menu Cross-Site Scripting (1.7.1)

Apache Tomcat Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2008-5519)

Severity

Medium

Classification

CVE-2006-2284

Tags

Missing Update Known Vulnerabilities