Description
PHP remote file inclusion vulnerability in learnPath/include/scormExport.inc.php in Claroline 1.7.4 and earlier allows remote attackers to execute arbitrary PHP code via the includePath parameter.
References
- claroline-scormexportinc-file-include(25563) vdb-entry
- 20060331 Claroline <= 1.7.4 (scormExport.inc.php) Remote Code Execution Exploit by rgod mailing-list
- http://retrogod.altervista.org/claroline_174_incl_xpl.html
- 19461 third-party-advisory
- 17341 vdb-entry
- ADV-2006-1187 vdb-entry
- 24286 vdb-entry
- 1627 exploit