Description

Multiple PHP remote file inclusion vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary PHP code via unknown vectors.

Remediation

References

CVE-2005-1377

Related Vulnerabilities

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-42112)

WordPress Plugin Portfolio for Elementor, Image Gallery & Post Grid-PowerFolio Cross-Site Scripting (2.3)

PHP Improper Input Validation Vulnerability (CVE-2015-8873)

WordPress Plugin Product Catalog Multiple Vulnerabilities (3.1.2)

WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.14)

Severity

High

Classification

CVE-2005-1377

Tags

Missing Update Known Vulnerabilities