Description

PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter.

Remediation

References

CVE-2006-5256

Related Vulnerabilities

Apache Tomcat version older than 6.0.18

CrushFTP Server Deserialization of Untrusted Data Vulnerability (CVE-2017-14035)

Apache HTTP Server Other Vulnerability (CVE-1999-0067)

WordPress Plugin SupportEzzy Ticket System Cross-Site Scripting (1.2.5)

WordPress Plugin Email Encoder-Protect Email Addresses Multiple Cross-Site Scripting Vulnerabilities (1.4.3)

Severity

High

Classification

CVE-2006-5256

Tags

Missing Update Known Vulnerabilities