Approved changes feed: RSS · Atom
cpe:2.3:a:claroline:claroline:1.7.5:*:*:*:*:*:*:*part: a version: 1.7.5 update: *
| Vendor | Claroline (64e8ace1-c36f-5409-940f-5c14ddd33c08) |
|---|---|
| Product | Claroline (af9935aa-e333-54d2-afbb-3ee6dff2f481) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/claroline/claroline |
purl2cpe | 2026-06-01 10:13:23.374719 |
pkg:sourceforge/claroline |
purl2cpe | 2026-06-01 10:13:23.374720 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-3262 |
vulnerable | 2026-06-08 04:50:33.801574 |
Details available
Cross-site request forgery (CSRF) vulnerability in Claroline before 1.8.10 allows remote attackers to change passwords, related to lack of a requirement for the previous password.
Published: 2008-07-22T17:00:00.000Z
Updated: 2024-08-07T09:28:41.959Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3261 |
vulnerable | 2026-06-08 04:50:33.800630 |
Details available
Open redirect vulnerability in claroline/redirector.php in Claroline before 1.8.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.
Published: 2008-07-22T17:00:00.000Z
Updated: 2024-08-07T09:28:41.890Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3260 |
vulnerable | 2026-06-08 04:50:33.793692 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.10 allow remote attackers to inject arbitrary web script or HTML via (1) the cwd parameter in a rqMkHtml action to document/rqmkhtml.php, or the query string to (2) announcements/announcements.php, (3) calendar/agenda.php, (4) course/index.php, (5) course_description/index.php, (6) document/document.php, (7) exercise/exercise.php, (8) group/group_space.php, (9) phpbb/newtopic.php, (10) phpbb/reply.php, (11) phpbb/viewtopic.php, (12) wiki/wiki.php, or (13) work/work.php in claroline/.
Published: 2008-07-22T17:00:00.000Z
Updated: 2024-08-07T09:28:41.971Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-7048 |
vulnerable | 2026-06-08 04:49:30.227125 |
Details available
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) clarolineRepositorySys parameter to (a) atutor.inc.php (b) db-generic.inc.php (c) docebo.inc.php (d) dokeos.1.6.inc.php (e) dokeos.inc.php (f) ganesha.inc.php (g) mambo.inc.php (h) moodle.inc.php (i) phpnuke.inc.php (j) postnuke.inc.php and (k) spip.inc.php in claroline/auth/extauth/drivers/; (2) includePath parameter in mambo.inc.php, postnuke.inc.php, and (l) inc/lib/event/init_event_manager.inc.php; and (3) rootSys parameter in (m) inc/lib/export_exe_tracking.class.php, a different set of vectors than CVE-2006-2284.
Published: 2007-02-24T00:00:00.000Z
Updated: 2024-09-16T18:04:08.737Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5256 |
vulnerable | 2026-06-08 04:49:20.137951 |
Details available
PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter.
Published: 2006-10-12T22:00:00.000Z
Updated: 2024-08-07T19:41:05.199Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-4844 |
vulnerable | 2026-06-08 04:49:18.994209 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-2284 |
vulnerable | 2026-06-08 04:49:06.223769 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.