claro_init_local.inc.php in Claroline 1.7.2 uses guessable session cookies (MD5 hash of connection time), which allows remote malicious users to hijack sessions and possibly gain administrative privileges.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
claroline claroline 1.7.2 |