Claroline Other Vulnerability (CVE-2006-2868)

Description

Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the includePath cookie to (1) auth/extauth/drivers/mambo.inc.php or (2) auth/extauth/drivers/postnuke.inc.php.

Remediation

References

CVE-2006-2868

Related Vulnerabilities

WordPress 'index.php' Cross-Site Scripting Vulnerability (1.5)

WordPress Plugin POST SMTP Mailer-Email log, Delivery Failure Notifications and Best Mail SMTP for WordPress Cross-Site Request Forgery (2.0.20)

Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2018-12023)

PHP Out-of-bounds Read Vulnerability (CVE-2020-7061)

WordPress Plugin Uji Countdown Cross-Site Scripting (2.2)

Severity

Medium

Classification