← Back

CVE-2006-2284

nvd nist
Published: May 10, 2006Modified: Apr 16, 2026

JSON object

Loading...
6.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 8.6 / Impact: 6.4
Source: NVD

Description

Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) clarolineRepositorySys parameter in ldap.inc.php and the (2) claro_CasLibPath parameter in casProcess.inc.php.

Affected (16)

Claroline
1 product
Claroline
Dokeos
1 product
Dokeos
Configuration A
16 vulnerable
Vulnerable SoftwareAffected Versions
Claroline
Claroline
Version 1.5.3
Claroline
Version 1.5.4
Claroline
Version 1.5
Claroline
Version 1.6
Claroline
Version 1.6_beta
Claroline
Version 1.6_rc1
Claroline
Version 1.7.2
Claroline
Version 1.7.4
Claroline
Version 1.7.5
Dokeos
Dokeos
Version 1.4
Dokeos
Version 1.5.3
Dokeos
Version 1.5.4
Dokeos
Version 1.5.5
Dokeos
Version 1.5
Dokeos
Version 1.6.4
Dokeos
Version 1.6_rc2

References (16)

Source: cve@mitre.org
PatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
ExploitPatch
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.