Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2006-4844
HistorySep 19, 2006 - 1:07 a.m.

CVE-2006-4844

2006-09-1901:07:00
CWE-94
mitre
web.nvd.nist.gov
41
cve-2006-4844
php
remote file inclusion
vulnerability
claroline
dokeos
extauthsource
newuser
nvd

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.074

Percentile

94.1%

JSON

PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the extAuthSource[newUser] parameter.

Affected configurations

Nvd
Node
clarolineclarolineRange≤1.7.7
OR
clarolineclarolineMatch1.2
OR
clarolineclarolineMatch1.3
OR
clarolineclarolineMatch1.4
OR
clarolineclarolineMatch1.5
OR
clarolineclarolineMatch1.5.3
OR
clarolineclarolineMatch1.5.4
OR
clarolineclarolineMatch1.6
OR
clarolineclarolineMatch1.6_beta
OR
clarolineclarolineMatch1.6_rc1
OR
clarolineclarolineMatch1.7
OR
clarolineclarolineMatch1.7.1
OR
clarolineclarolineMatch1.7.2
OR
clarolineclarolineMatch1.7.3
OR
clarolineclarolineMatch1.7.4
OR
clarolineclarolineMatch1.7.5
OR
clarolineclarolineMatch1.7.6
OR
dokeosopen_source_learning_and_knowledge_management_toolMatch1.4
OR
dokeosopen_source_learning_and_knowledge_management_toolMatch1.5
OR
dokeosopen_source_learning_and_knowledge_management_toolMatch1.5.3
OR
dokeosopen_source_learning_and_knowledge_management_toolMatch1.5.4
OR
dokeosopen_source_learning_and_knowledge_management_toolMatch1.5.5
OR
dokeosopen_source_learning_and_knowledge_management_toolMatch1.6.4
OR
dokeosopen_source_learning_and_knowledge_management_toolMatch1.6.4_p1
OR
dokeosopen_source_learning_and_knowledge_management_toolMatch1.6.5
OR
dokeosopen_source_learning_and_knowledge_management_toolMatch1.6_rc2
VendorProductVersionCPE
clarolineclaroline*cpe:2.3:a:claroline:claroline:*:*:*:*:*:*:*:*
clarolineclaroline1.2cpe:2.3:a:claroline:claroline:1.2:*:*:*:*:*:*:*
clarolineclaroline1.3cpe:2.3:a:claroline:claroline:1.3:*:*:*:*:*:*:*
clarolineclaroline1.4cpe:2.3:a:claroline:claroline:1.4:*:*:*:*:*:*:*
clarolineclaroline1.5cpe:2.3:a:claroline:claroline:1.5:*:*:*:*:*:*:*
clarolineclaroline1.5.3cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*
clarolineclaroline1.5.4cpe:2.3:a:claroline:claroline:1.5.4:*:*:*:*:*:*:*
clarolineclaroline1.6cpe:2.3:a:claroline:claroline:1.6:*:*:*:*:*:*:*
clarolineclaroline1.6_betacpe:2.3:a:claroline:claroline:1.6_beta:*:*:*:*:*:*:*
clarolineclaroline1.6_rc1cpe:2.3:a:claroline:claroline:1.6_rc1:*:*:*:*:*:*:*
Rows per page:
1-10 of 261

Related

nvd 1
exploitpack 1
zdt 1
cvelist 1
nessus 2
exploitdb 1
nvd
nvd
CVE-2006-4844
2006-09-19 01:07:00
exploitpack
exploitpack
Claroline 1.7.7 - Arbitrary File Inclusion
2016-08-14 00:00:00
zdt
zdt
Claroline < 1.7.7 - Arbitrary File Inclusion Vulnerability
2018-01-20 00:00:00
cvelist
cvelist
CVE-2006-4844
2006-09-19 01:00:00
nessus
nessus
Claroline claro_init_local.inc.php extAuthSource[newUser] Parameter Remote File Inclusion
2006-09-16 00:00:00
Dokeos claro_init_local.inc.php extAuthSource Parameter Array Remote File Inclusion
2006-09-16 00:00:00
exploitdb
exploitdb
Claroline &lt; 1.7.7 - Arbitrary File Inclusion
2016-08-14 00:00:00

CVSS2

5.1

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.074

Percentile

94.1%

JSON
Related for CVE-2006-4844
nvd1exploitpack1zdt1cvelist1nessus2exploitdb1