| Package | Affected versions | Patched versions |
|---|---|---|
| claroline | = 1.7.2 |
claro_init_local.inc.php in Claroline 1.7.2 uses guessable session cookies (MD5 hash of connection time), which allows remote attackers to hijack sessions and possibly gain administrative privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free