Published: 22/07/2008 Updated: 11/10/2018

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 435

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Open redirect vulnerability in claroline/redirector.php in Claroline prior to 1.8.10 allows remote malicious users to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.

Vulnerable Product	Search on Vulmon	Subscribe to Product
claroline claroline 1.4
claroline claroline 1.5
claroline claroline 1.7.2
claroline claroline 1.7.3
claroline claroline 1.8.2
claroline claroline 1.8.3
claroline claroline 1.5.3
claroline claroline 1.5.4
claroline claroline 1.7.4
claroline claroline 1.7.5
claroline claroline 1.8.4
claroline claroline 1.8.5
claroline claroline 1.6
claroline claroline 1.6_beta
claroline claroline 1.6_rc1
claroline claroline 1.7.6
claroline claroline 1.7.7
claroline claroline 1.8.6
claroline claroline 1.8.7
claroline claroline 1.2
claroline claroline 1.3
claroline claroline 1.7
claroline claroline 1.7.1
claroline claroline 1.8.0
claroline claroline 1.8.1
claroline claroline 1.8.8
claroline claroline

source: wwwsecurityfocuscom/bid/30269/info Claroline is prone to multiple input-validation vulnerabilities: 1 Multiple cross-site scripting vulnerabilities 2 A remote URI-redirection vulnerability An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspect ...

CWE-59 http://sourceforge.net/project/shownotes.php?release_id=613634 http://wiki.claroline.net/index.php/Changelog_1.8.x#Modification_between_claroline_1.8.9_and_1.8.10 http://www.securityfocus.com/bid/30269 http://securityreason.com/securityalert/4020 https://exchange.xforce.ibmcloud.com/vulnerabilities/43854 http://www.securityfocus.com/archive/1/494539/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/32071/

CVE-2008-3261

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect