Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote malicious users to execute arbitrary PHP code via a URL in the (1) clarolineRepositorySys parameter in ldap.inc.php and the (2) claro_CasLibPath parameter in casProcess.inc.php.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
claroline claroline 1.7.4 |
||
claroline claroline 1.7.5 |
||
dokeos dokeos 1.6_rc2 |
||
claroline claroline 1.6_rc1 |
||
claroline claroline 1.7.2 |
||
dokeos dokeos 1.5.5 |
||
dokeos dokeos 1.6.4 |
||
claroline claroline 1.5 |
||
claroline claroline 1.5.3 |
||
dokeos dokeos 1.4 |
||
dokeos dokeos 1.5 |
||
claroline claroline 1.5.4 |
||
claroline claroline 1.6 |
||
claroline claroline 1.6_beta |
||
dokeos dokeos 1.5.3 |
||
dokeos dokeos 1.5.4 |