Description
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the includePath cookie to (1) auth/extauth/drivers/mambo.inc.php or (2) auth/extauth/drivers/postnuke.inc.php.
Remediation
References
Related Vulnerabilities
PHP Improper Input Validation Vulnerability (CVE-2007-6039)
WordPress Plugin Calendar Cross-Site Request Forgery (1.3.2)
WordPress Plugin BulletProof Security Cross-Site Scripting (.50.9)
WordPress Plugin Import XML and RSS Feeds Arbitrary File Upload (2.1.5)
OpenSSL Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-2183)