Description

PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter.

Remediation

References

CVE-2006-5256

Related Vulnerabilities

WordPress Plugin Easy Media Download Cross-Site Scripting (1.1.6)

WordPress Plugin Admin Custom Login Cross-Site Request Forgery (3.2.7)

WordPress 4.4.x Multiple Vulnerabilities (4.4 - 4.4.10)

WordPress Plugin Download Monitor Information Disclosure (1.6.3)

WordPress Plugin WP-Polls Cross-Site Scripting (2.60)

Severity

High

Classification

CVE-2006-5256

Tags

Missing Update Known Vulnerabilities