CVE-2006-4844
published 2006-09-19CVE-2006-4844: PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products, allows…
PriorityP341medium5.1CVSS 2.0
AVNACHAuNCPIPAP
EXPLOIT
EPSS
10.08%
95.0th percentile
PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the extAuthSource[newUser] parameter.
Affected
26 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| claroline | claroline | <= 1.7.7 | — |
| claroline | claroline | — | — |
| claroline | claroline | — | — |
| claroline | claroline | — | — |
| claroline | claroline | — | — |
| claroline | claroline | — | — |
| claroline | claroline | — | — |
| claroline | claroline | — | — |
| claroline | claroline | — | — |
| claroline | claroline | — | — |
| claroline | claroline | — | — |
| claroline | claroline | — | — |
| claroline | claroline | — | — |
| claroline | claroline | — | — |
| claroline | claroline | — | — |
| claroline | claroline | — | — |
| claroline | claroline | — | — |
| dokeos | open_source_learning_and_knowledge_management_tool | — | — |
| dokeos | open_source_learning_and_knowledge_management_tool | — | — |
| dokeos | open_source_learning_and_knowledge_management_tool | — | — |
| dokeos | open_source_learning_and_knowledge_management_tool | — | — |
| dokeos | open_source_learning_and_knowledge_management_tool | — | — |
| dokeos | open_source_learning_and_knowledge_management_tool | — | — |
| dokeos | open_source_learning_and_knowledge_management_tool | — | — |
| dokeos | open_source_learning_and_knowledge_management_tool | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/21931http://secunia.com/advisories/21948http://www.claroline.net/wiki/index.php/Changelog_1.7.x#Modification_between_claroline_1.7.7_and_1.7.8http://www.gulftech.org/?node=research&article_id=00112-09142006http://www.gulftech.org/?node=research&article_id=00112-09142006&http://www.securityfocus.com/bid/20056http://www.vupen.com/english/advisories/2006/3638http://www.vupen.com/english/advisories/2006/3639https://exchange.xforce.ibmcloud.com/vulnerabilities/28943http://secunia.com/advisories/21931http://secunia.com/advisories/21948http://www.claroline.net/wiki/index.php/Changelog_1.7.x#Modification_between_claroline_1.7.7_and_1.7.8http://www.gulftech.org/?node=research&article_id=00112-09142006http://www.gulftech.org/?node=research&article_id=00112-09142006&http://www.securityfocus.com/bid/20056http://www.vupen.com/english/advisories/2006/3638http://www.vupen.com/english/advisories/2006/3639https://exchange.xforce.ibmcloud.com/vulnerabilities/28943
2006-09-19
Published