Description
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary PHP code via unknown vectors.
References
- 13407 vdb-entry
- 15161 third-party-advisory
- 20050427 ZRCSA-200501 - Multiple vulnerabilities in Claroline mailing-list
- claroline-file-include(20300) vdb-entry
- http://www.claroline.net/news.php#85
- 1013822 vdb-entry
- 15725 third-party-advisory