Lucene search
HistoryJun 06, 2006 - 8:06 p.m.
CVE-2006-2868
cve-2006-2868
php
remote file inclusion
claroline 1.7.6
vulnerability
nvd
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.123 Low
EPSS
Percentile
95.5%
Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the includePath cookie to (1) auth/extauth/drivers/mambo.inc.php or (2) auth/extauth/drivers/postnuke.inc.php.
Affected configurations
Node
clarolineclarolineMatch1.7.6
| CPE | Name | Operator | Version |
|---|---|---|---|
| claroline:claroline | claroline | eq | 1.7.6 |
Related
cvelist
cvelist
CVE-2006-2868
2006-06-06 20:03:00
prion
prion
Remote file inclusion
2006-06-06 20:06:00
nvd
nvd
CVE-2006-2868
2006-06-06 20:06:00
nessus
nessus
Claroline Multiple Script includePath Parameter Remote File Inclusion
2006-06-05 00:00:00
5.1 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
7.6 High
AI Score
Confidence
Low
0.123 Low
EPSS
Percentile
95.5%
Related for CVE-2006-2868