Description
Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.7.7 allow remote attackers to inject arbitrary HTML or web script via unspecified attack vectors, possibly including (1) calendar/myagenda.php, (2) document/document.php, (3) phpbb/newtopic.php, (4) tracking/userLog.php, and (5) wiki/page.php.
References
- 1016387 vdb-entry
- 1160 third-party-advisory
- http://www.claroline.net/dlarea/claroline.patch17701.zip
- 18667 vdb-entry
- claroline-multiple-xss(27391) vdb-entry
- 20060626 Claroline Cross-Site Scripting Vulnerabilities mailing-list
- 20817 third-party-advisory
- ADV-2006-2544 vdb-entry