PT-2005-2375 · Claroline · Claroline

Deepfear + 3 · Publicado 2005-05-02 · Atualizado 2017-07-11 · CVE-2005-1374

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Claroline versions 1.5.3 through 1.6 Release Candidate 1

Description: The issue allows remote attackers to inject arbitrary web script or HTML via several API endpoints, including "exercise result.php", "exercice submit.php", "agenda.php", "learningPathList.php", "learningPathAdmin.php", "learningPath.php", "userLog.php", the tool parameter to "toolaccess details.php", the data parameter to "user access details.php", or the coursePath parameter to "myagenda.php".

Recommendations: For Claroline versions 1.5.3 through 1.6 Release Candidate 1, consider disabling access to the vulnerable API endpoints until a patch is available. Restrict input for the tool parameter to "toolaccess details.php", the data parameter to "user access details.php", and the coursePath parameter to "myagenda.php" to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2005-1374

Produtos afetados

Claroline

Referências · 12

• 🔥 https://exploit-db.com/exploits/25551 · Exploit
• 🔥 https://exploit-db.com/exploits/25549 · Exploit
• 🔥 http://claroline.net/news.php#85 · Exploit
• 🔥 http://securityfocus.com/bid/13407 · Exploit
• 🔥 http://secunia.com/advisories/15161 · Exploit
• 🔥 https://exploit-db.com/exploits/25550 · Exploit
• 🔥 http://securitytracker.com/id?1013822 · Exploit
• http://secunia.com/advisories/15725 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20295 · Nota
• http://marc.info/?l=bugtraq&m=111464607103407&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1374 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1374 · Nota