Skip to content
Noroxi

claroline records

31 published records for vendor claroline.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
11
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

31 records
  • CVE-2022-37159
    47Plan

    Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload.

    CriticalCVSS 9.8No exploitEPSS 26%

    claroline · clarolineAug 25, 2022

  • CVE-2006-0411
    41Plan

    claro_init_local.inc.php in Claroline 1.7.2 uses guessable session cookies (MD5 hash of connection time), which allows remote attackers to h

    CriticalCVSS 10.0No exploitEPSS 2%

    claroline · clarolineJan 25, 2006

  • CVE-2006-1594
    32Monitor

    Multiple directory traversal vulnerabilities in document/rqmkhtml.php in Claroline 1.7.4 and earlier allow remote attackers to use ".." (dot

    HighCVSS 7.5No exploitEPSS 5%

    claroline · clarolineApr 3, 2006

  • CVE-2006-7048
    31Monitor

    Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the

    HighCVSS 7.5Proof of conceptEPSS 4%

    claroline · clarolineFeb 23, 2007

  • CVE-2006-5256
    31Monitor

    PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote attackers to execut

    HighCVSS 7.5Proof of conceptEPSS 4%

    claroline · clarolineOct 12, 2006

  • CVE-2005-1375
    31Monitor

    Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to ex

    HighCVSS 7.5Proof of conceptEPSS 3%

    claroline · clarolineMay 3, 2005

  • CVE-2006-1596
    31Monitor

    PHP remote file inclusion vulnerability in learnPath/include/scormExport.inc.php in Claroline 1.7.4 and earlier allows remote attackers to e

    HighCVSS 7.5No exploitEPSS 2%

    claroline · clarolineApr 3, 2006

  • CVE-2005-1377
    31Monitor

    Multiple PHP remote file inclusion vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote att

    HighCVSS 7.5No exploitEPSS 2%

    claroline · clarolineMay 3, 2005

  • CVE-2005-1376
    30Monitor

    Multiple directory traversal vulnerabilities in (1) document.php or (2) insertMyDoc.php in Claroline 1.5.3 through 1.6 Release Candidate 1,

    HighCVSS 7.5No exploitEPSS 2%

    claroline · clarolineMay 3, 2005

  • CVE-2006-2284
    29Monitor

    Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the

    MediumCVSS 6.8Proof of conceptEPSS 7%

    claroline · clarolineMay 9, 2006

  • CVE-2005-1374
    28Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote at

    MediumCVSS 6.8Proof of conceptEPSS 5%

    claroline · clarolineMay 3, 2005

  • CVE-2022-37161
    24Monitor

    Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS) via SVG file upload.

    MediumCVSS 6.1No exploitEPSS 1%

    claroline · clarolineAug 25, 2022

  • CVE-2006-2868
    23Monitor

    Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the

    MediumCVSS 5.1Proof of conceptEPSS 11%

    claroline · clarolineJun 6, 2006

  • CVE-2006-4844
    23Monitor

    PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other

    MediumCVSS 5.1Proof of conceptEPSS 10%

    claroline · clarolineSep 18, 2006

  • CVE-2008-3262
    23Monitor

    Cross-site request forgery (CSRF) vulnerability in Claroline before 1.8.10 allows remote attackers to change passwords, related to lack of a

    MediumCVSS 5.8No exploitEPSS 1%

    claroline · clarolineJul 22, 2008

  • CVE-2007-4718
    22Monitor

    Directory traversal vulnerability in inc/lib/language.lib.php in Claroline before 1.8.6 allows remote attackers to include and execute arbit

    MediumCVSS 5.1Proof of conceptEPSS 7%

    claroline · clarolineSep 5, 2007

  • CVE-2022-37162
    21Monitor

    Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS).

    MediumCVSS 5.4No exploitEPSS 1%

    claroline · clarolineAug 25, 2022

  • CVE-2022-37160
    21Monitor

    Claroline 13.5.7 and prior allows an authenticated attacker to elevate privileges via the arbitrary creation of a privileged user.

    MediumCVSS 5.4No exploitEPSS 1%

    claroline · clarolineAug 25, 2022

  • CVE-2011-3716
    20Monitor

    Claroline 1.9.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation

    MediumCVSS 5.0No exploitEPSS 1%

    claroline · clarolineSep 23, 2011

  • CVE-2006-1595
    19Monitor

    Cross-site scripting (XSS) vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attackers to read arbitrary f

    MediumCVSS 4.3Proof of conceptEPSS 5%

    claroline · clarolineApr 3, 2006

  • CVE-2008-3261
    18Monitor

    Open redirect vulnerability in claroline/redirector.php in Claroline before 1.8.10 allows remote attackers to redirect users to arbitrary we

    MediumCVSS 4.3Proof of conceptEPSS 5%

    claroline · clarolineJul 22, 2008

  • CVE-2008-3260
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.10 allow remote attackers to inject arbitrary web script or HTML

    MediumCVSS 4.3Proof of conceptEPSS 5%

    claroline · clarolineJul 22, 2008

  • CVE-2008-3315
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web script or HTML via th

    MediumCVSS 4.3Proof of conceptEPSS 2%

    claroline · clarolineJul 25, 2008

  • CVE-2009-1907
    18Monitor

    Cross-site scripting (XSS) vulnerability in claroline/linker/notfound.php in Claroline 1.8.11 allows remote attackers to inject arbitrary we

    MediumCVSS 4.3Proof of conceptEPSS 2%

    claroline · clarolineJun 4, 2009

  • CVE-2007-3517
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.3 allow remote attackers to inject arbitrary web script or HTML via the

    MediumCVSS 4.3Proof of conceptEPSS 2%

    claroline · clarolineJul 3, 2007