Vulnerability Details CVE-2005-1375
Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary SQL commands via (1) learningPath.php, (2) learningPathAdmin.php, (3) learnPath_details.php, (4) modules_pool.php, (5) module.php, (6) uInfo parameter in userInfo.php, or (7) exo_id parameter to exercises_details.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 79.0%
CVSS Severity
CVSS v2 Score 7.5
References
- http://marc.info/?l=bugtraq&m=111464607103407&w=2
- http://secunia.com/advisories/15161
- http://secunia.com/advisories/15725
- http://securitytracker.com/id?1013822
- http://www.claroline.net/news.php#85
- http://www.securityfocus.com/bid/13407
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20298
- http://marc.info/?l=bugtraq&m=111464607103407&w=2
- http://secunia.com/advisories/15161
- http://secunia.com/advisories/15725
- http://securitytracker.com/id?1013822
- http://www.claroline.net/news.php#85
- http://www.securityfocus.com/bid/13407
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20298