Approved changes feed: RSS · Atom
cpe:2.3:a:claroline:claroline:1.7.7:*:*:*:*:*:*:*part: a version: 1.7.7 update: *
| Vendor | Claroline (64e8ace1-c36f-5409-940f-5c14ddd33c08) |
|---|---|
| Product | Claroline (af9935aa-e333-54d2-afbb-3ee6dff2f481) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/claroline/claroline |
purl2cpe | 2026-06-01 10:13:23.377202 |
pkg:sourceforge/claroline |
purl2cpe | 2026-06-01 10:13:23.377204 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-3262 |
vulnerable | 2026-06-08 04:50:33.801606 |
Details available
Cross-site request forgery (CSRF) vulnerability in Claroline before 1.8.10 allows remote attackers to change passwords, related to lack of a requirement for the previous password.
Published: 2008-07-22T17:00:00.000Z
Updated: 2024-08-07T09:28:41.959Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3261 |
vulnerable | 2026-06-08 04:50:33.800664 |
Details available
Open redirect vulnerability in claroline/redirector.php in Claroline before 1.8.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.
Published: 2008-07-22T17:00:00.000Z
Updated: 2024-08-07T09:28:41.890Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-3260 |
vulnerable | 2026-06-08 04:50:33.794723 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.10 allow remote attackers to inject arbitrary web script or HTML via (1) the cwd parameter in a rqMkHtml action to document/rqmkhtml.php, or the query string to (2) announcements/announcements.php, (3) calendar/agenda.php, (4) course/index.php, (5) course_description/index.php, (6) document/document.php, (7) exercise/exercise.php, (8) group/group_space.php, (9) phpbb/newtopic.php, (10) phpbb/reply.php, (11) phpbb/viewtopic.php, (12) wiki/wiki.php, or (13) work/work.php in claroline/.
Published: 2008-07-22T17:00:00.000Z
Updated: 2024-08-07T09:28:41.971Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5256 |
vulnerable | 2026-06-08 04:49:20.140074 |
Details available
PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter.
Published: 2006-10-12T22:00:00.000Z
Updated: 2024-08-07T19:41:05.199Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-3257 |
vulnerable | 2026-06-08 04:49:08.724978 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via unspecified attack vectors, possibly including (1) calendar/myagenda.php, (2) document/document.php, (3) phpbb/newtopic.php, (4) tracking/userLog.php, and (5) wiki/page.php.
Published: 2006-06-27T19:00:00.000Z
Updated: 2024-08-07T18:23:20.610Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.