CVE-2006-4844

Published: Sep 19, 2006Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the extAuthSource[newUser] parameter.

Affected (26)

Products: Claroline: Claroline · Dokeos: Open Source Learning And Knowledge Management Tool

Claroline

1 product

Claroline

Dokeos

1 product

Open Source Learning And Knowledge Management Tool

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Claroline Claroline	Up to 1.7.7
Claroline Claroline	Version 1.2
Claroline Claroline	Version 1.3
Claroline Claroline	Version 1.4
Claroline Claroline	Version 1.5.3
Claroline Claroline	Version 1.5.4
Claroline Claroline	Version 1.5
Claroline Claroline	Version 1.6
Claroline Claroline	Version 1.6_beta
Claroline Claroline	Version 1.6_rc1
Claroline Claroline	Version 1.7.1
Claroline Claroline	Version 1.7.2
Claroline Claroline	Version 1.7.3
Claroline Claroline	Version 1.7.4
Claroline Claroline	Version 1.7.5
Claroline Claroline	Version 1.7.6
Claroline Claroline	Version 1.7
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.4
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.5.3
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.5.4
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.5.5
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.5
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.6.4
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.6.4_p1
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.6.5
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.6_rc2