Lucene search

[email protected]CVE-2006-1594

HistoryApr 03, 2006 - 10:04 a.m.

CVE-2006-1594

2006-04-0310:04:00

[email protected]

web.nvd.nist.gov

cve-2006-1594

directory traversal

claroline

remote code execution

nvd

security vulnerability

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.03 Low

EPSS

Percentile

91.1%

JSON

Multiple directory traversal vulnerabilities in document/rqmkhtml.php in Claroline 1.7.4 and earlier allow remote attackers to use “…” (dot dot) sequences to (1) read arbitrary files via the file parameter in a rqEditHtml command to document/rqmkhtml.php or (2) execute arbitrary code via the includePath parameter to learnPath/include/scormExport.inc.php.

Affected configurations

NVD

Node

clarolineclarolineRange≤1.7.4

clarolineclarolineMatch1.5

clarolineclarolineMatch1.5.3

clarolineclarolineMatch1.5.4

clarolineclarolineMatch1.6

clarolineclarolineMatch1.6_beta

clarolineclarolineMatch1.6_rc1

clarolineclarolineMatch1.7.2

CPENameOperatorVersion
claroline:clarolineclarolinele1.7.4
claroline:clarolineclarolineeq1.5
claroline:clarolineclarolineeq1.5.3
claroline:clarolineclarolineeq1.5.4
claroline:clarolineclarolineeq1.6
claroline:clarolineclarolineeq1.6_beta
claroline:clarolineclarolineeq1.6_rc1
claroline:clarolineclarolineeq1.7.2

CPE	Name	Operator	Version
claroline:claroline	claroline	le	1.7.4
claroline:claroline	claroline	eq	1.5
claroline:claroline	claroline	eq	1.5.3
claroline:claroline	claroline	eq	1.5.4
claroline:claroline	claroline	eq	1.6
claroline:claroline	claroline	eq	1.6_beta
claroline:claroline	claroline	eq	1.6_rc1
claroline:claroline	claroline	eq	1.7.2

References

retrogod.altervista.org/claroline_174_incl_xpl.html

secunia.com/advisories/19461

www.securityfocus.com/bid/17343

www.vupen.com/english/advisories/2006/1187

exchange.xforce.ibmcloud.com/vulnerabilities/25561

www.exploit-db.com/exploits/1627

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.7 High

AI Score

Confidence

Low

0.03 Low

EPSS

Percentile

91.1%

JSON

Related for CVE-2006-1594

prion1 nvd1 cvelist1 nessus1