CVE-2006-2284
Published May 10, 2006
Last updated 6 years ago
Overview
- Description
- Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) clarolineRepositorySys parameter in ldap.inc.php and the (2) claro_CasLibPath parameter in casProcess.inc.php.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.8
- Impact score
- 6.4
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Evaluator
- Comment
- -
- Impact
- -
- Solution
- -
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:claroline:claroline:1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9AE56684-B98B-4642-93F3-8C6297246E78"
},
{
"criteria": "cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "88E5AD48-31AA-4A9E-969A-6E45E4B6F827"
},
{
"criteria": "cpe:2.3:a:claroline:claroline:1.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A0BD0DDD-51EC-40E6-8E6D-635E449478AF"
},
{
"criteria": "cpe:2.3:a:claroline:claroline:1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54EA479E-E55B-45B2-9DD2-4E2D088AF51B"
},
{
"criteria": "cpe:2.3:a:claroline:claroline:1.6_beta:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B3FF8764-0B6C-439B-9333-473F54B9921A"
},
{
"criteria": "cpe:2.3:a:claroline:claroline:1.6_rc1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A58F1F26-B87D-4445-AB31-0648A7B32E3F"
},
{
"criteria": "cpe:2.3:a:claroline:claroline:1.7.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "24F49508-B7BC-4971-B3A7-279DCE45E369"
},
{
"criteria": "cpe:2.3:a:claroline:claroline:1.7.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2DC9DF44-4883-422F-9FB8-57CDE7EA6C43"
},
{
"criteria": "cpe:2.3:a:claroline:claroline:1.7.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9FD502BE-8878-461D-AA04-AA450F652DC1"
},
{
"criteria": "cpe:2.3:a:dokeos:dokeos:1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35B1B18B-F92C-4951-8442-DE11FE355840"
},
{
"criteria": "cpe:2.3:a:dokeos:dokeos:1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6329F5E2-97BD-4D5B-A014-4CB3ABFDAB7F"
},
{
"criteria": "cpe:2.3:a:dokeos:dokeos:1.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D280AB8A-6162-47BB-9703-882EF3619B3D"
},
{
"criteria": "cpe:2.3:a:dokeos:dokeos:1.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25C0C6A4-3C86-4464-9D27-16E18CE5ADB4"
},
{
"criteria": "cpe:2.3:a:dokeos:dokeos:1.5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85349E3B-08CE-4188-88A5-3515EA26E6F4"
},
{
"criteria": "cpe:2.3:a:dokeos:dokeos:1.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71A3134F-784C-461A-B710-599A2C0A109A"
},
{
"criteria": "cpe:2.3:a:dokeos:dokeos:1.6_rc2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4576DCDD-266F-4984-981E-A83CFFE62021"
}
],
"operator": "OR"
}
]
}
]