Approved changes feed: RSS · Atom

cpe:2.3:a:claroline:claroline:1.8.2:*:*:*:*:*:*:*

part: a version: 1.8.2 update: *

VendorClaroline (64e8ace1-c36f-5409-940f-5c14ddd33c08)
ProductClaroline (af9935aa-e333-54d2-afbb-3ee6dff2f481)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/claroline/claroline purl2cpe 2026-06-01 10:13:23.383169
pkg:sourceforge/claroline purl2cpe 2026-06-01 10:13:23.383171

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2008-3262 vulnerable 2026-06-08 04:50:33.801654 Details available
Cross-site request forgery (CSRF) vulnerability in Claroline before 1.8.10 allows remote attackers to change passwords, related to lack of a requirement for the previous password.
Published: 2008-07-22T17:00:00.000Z
Updated: 2024-08-07T09:28:41.959Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3261 vulnerable 2026-06-08 04:50:33.800716 Details available
Open redirect vulnerability in claroline/redirector.php in Claroline before 1.8.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.
Published: 2008-07-22T17:00:00.000Z
Updated: 2024-08-07T09:28:41.890Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-3260 vulnerable 2026-06-08 04:50:33.796498 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.10 allow remote attackers to inject arbitrary web script or HTML via (1) the cwd parameter in a rqMkHtml action to document/rqmkhtml.php, or the query string to (2) announcements/announcements.php, (3) calendar/agenda.php, (4) course/index.php, (5) course_description/index.php, (6) document/document.php, (7) exercise/exercise.php, (8) group/group_space.php, (9) phpbb/newtopic.php, (10) phpbb/reply.php, (11) phpbb/viewtopic.php, (12) wiki/wiki.php, or (13) work/work.php in claroline/.
Published: 2008-07-22T17:00:00.000Z
Updated: 2024-08-07T09:28:41.971Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.