Claroline vulnerabilities

Products

• Claroline 31

Newest

• claroline Claroline 13.5.7 and prior allows an authenticated attacker to elevate privileges via the... CVE-2022-37160 5.4 MediumAugust 25, 2022
• claroline Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload. CVE-2022-37159 EPSS 27.2% 9.8 CriticalAugust 25, 2022
• claroline Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS) via SVG file upload. CVE-2022-37161 6.1 MediumAugust 25, 2022
• claroline Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS). An attacker can obtain... CVE-2022-37162 5.4 MediumAugust 25, 2022
• claroline Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.11.9 and earlier allow remote... CVE-2013-4753 3.5 LowDecember 26, 2014
• claroline Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.11.9 allow remote... CVE-2013-6267 4.3 MediumDecember 5, 2013
• claroline Claroline 1.9.7 allows remote attackers to obtain sensitive information via a direct request to a... CVE-2011-3716 5.0 MediumSeptember 23, 2011
• claroline Cross-site scripting (XSS) vulnerability in claroline/linker/notfound.php in Claroline 1.8.11... CVE-2009-1907 Public exploit 4.3 MediumJune 4, 2009
• claroline Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.10 allow remote attackers to... CVE-2008-3315 Public exploit 4.3 MediumJuly 25, 2008
• claroline Cross-site request forgery (CSRF) vulnerability in Claroline before 1.8.10 allows remote... CVE-2008-3262 5.8 MediumJuly 22, 2008
• claroline Open redirect vulnerability in claroline/redirector.php in Claroline before 1.8.10 allows remote... CVE-2008-3261 Public exploit 4.3 MediumJuly 22, 2008
• claroline Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.10 allow remote... CVE-2008-3260 Public exploit 4.3 MediumJuly 22, 2008
• claroline Claroline before 1.8.6 allows remote authenticated administrators to obtain sensitive information... CVE-2007-4742 4.3 MediumSeptember 6, 2007
• claroline Cross-site scripting (XSS) vulnerability in admin/adminusers.php in Claroline before 1.8.6 allows... CVE-2007-4741 3.5 LowSeptember 6, 2007
• claroline Directory traversal vulnerability in inc/lib/language.lib.php in Claroline before 1.8.6 allows... CVE-2007-4718 Public exploit 5.1 MediumSeptember 5, 2007
• claroline Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.6 allow remote... CVE-2007-4717 Public exploit 3.5 LowSeptember 5, 2007
• claroline Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.3 allow remote attackers to... CVE-2007-3517 Public exploit 4.3 MediumJuly 3, 2007
• claroline Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to... CVE-2006-7048 Public exploit 7.5 HighFebruary 24, 2007
• claroline PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0... CVE-2006-5256 Public exploit 7.5 HighOctober 12, 2006
• claroline, dokeos open source learning and knowledge management tool +1 more PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and... CVE-2006-4844 Public exploit EPSS 10.6% 5.1 MediumSeptember 19, 2006
• claroline Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.7.7 allow remote attackers to... CVE-2006-3257 4.3 MediumJune 27, 2006
• claroline Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.6 allow remote attackers to... CVE-2006-2868 Public exploit EPSS 11.1% 5.1 MediumJune 6, 2006
• claroline, dokeos +1 more Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to... CVE-2006-2284 Public exploit 6.8 MediumMay 9, 2006
• claroline PHP remote file inclusion vulnerability in learnPath/include/scormExport.inc.php in Claroline 1.7... CVE-2006-1596 7.5 HighApril 3, 2006
• claroline Cross-site scripting (XSS) vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier... CVE-2006-1595 Public exploit 4.3 MediumApril 3, 2006
• claroline Multiple directory traversal vulnerabilities in document/rqmkhtml.php in Claroline 1.7.4 and... CVE-2006-1594 7.5 HighApril 3, 2006
• claroline claro_init_local.inc.php in Claroline 1.7.2 uses guessable session cookies (MD5 hash of... CVE-2006-0411 10.0 HighJanuary 25, 2006
• claroline Multiple PHP remote file inclusion vulnerabilities in Claroline 1.5.3 through 1.6 Release... CVE-2005-1377 7.5 HighMay 2, 2005
• claroline Multiple directory traversal vulnerabilities in (1) document.php or (2) insertMyDoc.php in... CVE-2005-1376 7.5 HighMay 2, 2005
• claroline Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and... CVE-2005-1375 Public exploit 7.5 HighMay 2, 2005
• claroline Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.5.3 through 1.6 Release... CVE-2005-1374 Public exploit 6.8 MediumMay 2, 2005