Description

Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) clarolineRepositorySys parameter in ldap.inc.php and the (2) claro_CasLibPath parameter in casProcess.inc.php.

Remediation

References

CVE-2006-2284

Related Vulnerabilities

Apache HTTP Server Uncontrolled Resource Consumption Vulnerability (CVE-2023-43622)

Python Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2022-0391)

MySQL CVE-2016-5624 Vulnerability (CVE-2016-5624)

Apache Tomcat Other Vulnerability (CVE-2001-0829)

Apache HTTP Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2014-3583)

Severity

Medium

Classification

CVE-2006-2284

Tags

Missing Update Known Vulnerabilities