CVE-2009-1907

Description

References

• forum.claroline.net/viewtopic.php · Patch
• gsasec.blogspot.com/2009/05/claroline-v1811-cross-site-scripting.html · Exploit
• secunia.com/advisories/35019 · Vendor Advisory
• securityfocus.com/archive/1/503365/100/0/threaded
• securityfocus.com/bid/34883 · Exploit
• securitytracker.com/id
• exchange.xforce.ibmcloud.com/vulnerabilities/50404

Altre vulnerabilità di claroline

• CVE-2022-37162MEDIO 5.4Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS). An attacker can obtain javascript code execution by adding arbitrary…
• CVE-2022-37161MEDIO 6.1Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS) via SVG file upload.
• CVE-2022-37160MEDIO 5.4Claroline 13.5.7 and prior allows an authenticated attacker to elevate privileges via the arbitrary creation of a privileged user. By combin…
• CVE-2022-37159CRITICO 9.8Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload.
• CVE-2013-4753BASSO 3.5Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.11.9 and earlier allow remote authenticated users to inject arbitrary web…