Approved changes feed: RSS · Atom
cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*part: a version: 1.5.3 update: *
| Vendor | Claroline (64e8ace1-c36f-5409-940f-5c14ddd33c08) |
|---|---|
| Product | Claroline (af9935aa-e333-54d2-afbb-3ee6dff2f481) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/claroline/claroline |
purl2cpe | 2026-06-01 10:13:23.362699 |
pkg:sourceforge/claroline |
purl2cpe | 2026-06-01 10:13:23.362701 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-3262 |
vulnerable | 2026-06-08 04:50:33.801410 |
Details available
Cross-site request forgery (CSRF) vulnerability in Claroline before 1.8.10 allows remote attackers to change passwords, related to lack of a requirement for the previous password.
Published: 2008-07-22T17:00:00.000Z
Updated: 2024-08-07T09:28:41.959Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3261 |
vulnerable | 2026-06-08 04:50:33.800460 |
Details available
Open redirect vulnerability in claroline/redirector.php in Claroline before 1.8.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.
Published: 2008-07-22T17:00:00.000Z
Updated: 2024-08-07T09:28:41.890Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3260 |
vulnerable | 2026-06-08 04:50:33.788375 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.10 allow remote attackers to inject arbitrary web script or HTML via (1) the cwd parameter in a rqMkHtml action to document/rqmkhtml.php, or the query string to (2) announcements/announcements.php, (3) calendar/agenda.php, (4) course/index.php, (5) course_description/index.php, (6) document/document.php, (7) exercise/exercise.php, (8) group/group_space.php, (9) phpbb/newtopic.php, (10) phpbb/reply.php, (11) phpbb/viewtopic.php, (12) wiki/wiki.php, or (13) work/work.php in claroline/.
Published: 2008-07-22T17:00:00.000Z
Updated: 2024-08-07T09:28:41.971Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5256 |
vulnerable | 2026-06-08 04:49:20.137764 |
Details available
PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter.
Published: 2006-10-12T22:00:00.000Z
Updated: 2024-08-07T19:41:05.199Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-4844 |
vulnerable | 2026-06-08 04:49:18.989311 |
Details available
PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the extAuthSource[newUser] parameter.
Published: 2006-09-19T01:00:00.000Z
Updated: 2024-08-07T19:23:41.218Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2284 |
vulnerable | 2026-06-08 04:49:06.220382 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1596 |
vulnerable | 2026-06-08 04:48:57.563388 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1595 |
vulnerable | 2026-06-08 04:48:57.562911 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-1594 |
vulnerable | 2026-06-08 04:48:57.559690 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1377 |
vulnerable | 2026-06-08 04:48:26.478645 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1376 |
vulnerable | 2026-06-08 04:48:26.478279 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1375 |
vulnerable | 2026-06-08 04:48:26.477509 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1374 |
vulnerable | 2026-06-08 04:48:26.475597 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.