| Package | Affected versions | Patched versions |
|---|---|---|
| claroline | = 1.2= 1.3= 1.4= 1.5= 1.5.3= 1.5.4= 1.6= 1.6_beta= 1.6_rc1= 1.7= 1.7.1= 1.7.2= 1.7.3= 1.7.4= 1.7.5= 1.7.6≤ 1.7.7 | |
| open source learning and knowledge management tool | = 1.4= 1.5= 1.5.3= 1.5.4= 1.5.5= 1.6.4= 1.6.4_p1= 1.6.5= 1.6_rc2 |
PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the extAuthSource[newUser] parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free