Description

Cross-site scripting (XSS) vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attackers to read arbitrary files via ".." sequences in the file parameter in a rqEditHtml command.

Remediation

References

CVE-2006-1595

Related Vulnerabilities

WordPress Plugin HUSKY-Products Filter Professional for WooCommerce Unspecified Vulnerability (1.2.6.2)

Collabtive Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2010-4269)

Liferay version older than 7.0

ownCloud Other Vulnerability (CVE-2014-2055)

Oracle Database Server Other Vulnerability (CVE-2005-0298)

Severity

Medium

Classification

CVE-2006-1595

Tags

Missing Update Known Vulnerabilities