返回 CVE 浏览器

CVE-2005-1375

HIGH

7.5

CVSS Severity Score

EPSS Score0.1200%

EPSS Percentile43.54th

Published2005年5月3日

Last Modified2026年4月16日

Vulnerability Description

Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary SQL commands via (1) learningPath.php, (2) learningPathAdmin.php, (3) learnPath_details.php, (4) modules_pool.php, (5) module.php, (6) uInfo parameter in userInfo.php, or (7) exo_id parameter to exercises_details.php.

Affected Platforms (CPE)

📦

Claroline

Claroline

= 1.5.3

📦

Claroline

Claroline

= 1.6_beta

📦

Claroline

Claroline

= 1.6_rc1

References & Advisories

🔗 http://marc.info/?l=bugtraq&m=111464607103407&w=2

🔗 http://secunia.com/advisories/15161

🔗 http://secunia.com/advisories/15725

🔗 http://securitytracker.com/id?1013822

🔗 http://www.claroline.net/news.php#85

🔗 http://www.securityfocus.com/bid/13407

🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/20298

🔗 http://marc.info/?l=bugtraq&m=111464607103407&w=2

相关漏洞威胁

CVE-2008-082410.0

Unspecified vulnerability in the php2phps function in Claroline before 1.8.9 has unknown impact and attack vectors.

CVE-2006-041110.0

claro_init_local.inc.php in Claroline 1.7.2 uses guessable session cookies (MD5 hash of connection time), which allows remote atta...

CVE-2005-13767.5

Multiple directory traversal vulnerabilities in (1) document.php or (2) insertMyDoc.php in Claroline 1.5.3 through 1.6 Release Can...

CVE-2005-13777.5

Multiple PHP remote file inclusion vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow ...