Description

Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via unspecified attack vectors, possibly including (1) calendar/myagenda.php, (2) document/document.php, (3) phpbb/newtopic.php, (4) tracking/userLog.php, and (5) wiki/page.php.

Remediation

References

CVE-2006-3257

Related Vulnerabilities

Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-37147)

WordPress Plugin Ninja Forms Contact Form-The Drag and Drop Form Builder for WordPress Cross-Site Scripting (2.9.10)

Apache Tomcat Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2021-33037)

Dolibarr Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-19209)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-1836)

Severity

Medium

Classification

CVE-2006-3257

Tags

Missing Update Known Vulnerabilities