PT-2005-2375 · Claroline · Claroline

Deepfear + 3 · Published 2005-05-02 · Updated 2017-07-11 · CVE-2005-1374

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Claroline versions 1.5.3 through 1.6 Release Candidate 1

Description: The issue allows remote attackers to inject arbitrary web script or HTML via several API endpoints, including "exercise result.php", "exercice submit.php", "agenda.php", "learningPathList.php", "learningPathAdmin.php", "learningPath.php", "userLog.php", the tool parameter to "toolaccess details.php", the data parameter to "user access details.php", or the coursePath parameter to "myagenda.php".

Recommendations: For Claroline versions 1.5.3 through 1.6 Release Candidate 1, consider disabling access to the vulnerable API endpoints until a patch is available. Restrict input for the tool parameter to "toolaccess details.php", the data parameter to "user access details.php", and the coursePath parameter to "myagenda.php" to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2005-1374

Affected Products

Claroline

References · 12

• 🔥 https://exploit-db.com/exploits/25551 · Exploit
• 🔥 https://exploit-db.com/exploits/25549 · Exploit
• 🔥 http://claroline.net/news.php#85 · Exploit
• 🔥 http://securityfocus.com/bid/13407 · Exploit
• 🔥 http://secunia.com/advisories/15161 · Exploit
• 🔥 https://exploit-db.com/exploits/25550 · Exploit
• 🔥 http://securitytracker.com/id?1013822 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1374 · Security Note
• http://secunia.com/advisories/15725 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20295 · Note
• http://marc.info/?l=bugtraq&m=111464607103407&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-1374 · Note