İçeriğe atla
Noroxi

claroline kayıtları

claroline üreticisine ait 31 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
11
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 22

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

31 kayıt
  • CVE-2022-37159
    47Planlayın

    Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload.

    KritikCVSS 9,8İstismar yokEPSS %26

    claroline · claroline25 Ağu 2022

  • CVE-2006-0411
    41Planlayın

    claro_init_local.inc.php in Claroline 1.7.2 uses guessable session cookies (MD5 hash of connection time), which allows remote attackers to h

    KritikCVSS 10,0İstismar yokEPSS %2

    claroline · claroline25 Oca 2006

  • CVE-2006-1594
    32İzleyin

    Multiple directory traversal vulnerabilities in document/rqmkhtml.php in Claroline 1.7.4 and earlier allow remote attackers to use ".." (dot

    YüksekCVSS 7,5İstismar yokEPSS %5

    claroline · claroline3 Nis 2006

  • CVE-2006-7048
    31İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    claroline · claroline23 Şub 2007

  • CVE-2006-5256
    31İzleyin

    PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote attackers to execut

    YüksekCVSS 7,5Kavram kanıtıEPSS %4

    claroline · claroline12 Eki 2006

  • CVE-2005-1375
    31İzleyin

    Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to ex

    YüksekCVSS 7,5Kavram kanıtıEPSS %3

    claroline · claroline3 May 2005

  • CVE-2006-1596
    31İzleyin

    PHP remote file inclusion vulnerability in learnPath/include/scormExport.inc.php in Claroline 1.7.4 and earlier allows remote attackers to e

    YüksekCVSS 7,5İstismar yokEPSS %2

    claroline · claroline3 Nis 2006

  • CVE-2005-1377
    31İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote att

    YüksekCVSS 7,5İstismar yokEPSS %2

    claroline · claroline3 May 2005

  • CVE-2005-1376
    30İzleyin

    Multiple directory traversal vulnerabilities in (1) document.php or (2) insertMyDoc.php in Claroline 1.5.3 through 1.6 Release Candidate 1,

    YüksekCVSS 7,5İstismar yokEPSS %2

    claroline · claroline3 May 2005

  • CVE-2006-2284
    29İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the

    OrtaCVSS 6,8Kavram kanıtıEPSS %7

    claroline · claroline9 May 2006

  • CVE-2005-1374
    28İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote at

    OrtaCVSS 6,8Kavram kanıtıEPSS %5

    claroline · claroline3 May 2005

  • CVE-2022-37161
    24İzleyin

    Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS) via SVG file upload.

    OrtaCVSS 6,1İstismar yokEPSS %1

    claroline · claroline25 Ağu 2022

  • CVE-2006-2868
    23İzleyin

    Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.6 allow remote attackers to execute arbitrary PHP code via a URL in the

    OrtaCVSS 5,1Kavram kanıtıEPSS %11

    claroline · claroline6 Haz 2006

  • CVE-2006-4844
    23İzleyin

    PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other

    OrtaCVSS 5,1Kavram kanıtıEPSS %10

    claroline · claroline18 Eyl 2006

  • CVE-2008-3262
    23İzleyin

    Cross-site request forgery (CSRF) vulnerability in Claroline before 1.8.10 allows remote attackers to change passwords, related to lack of a

    OrtaCVSS 5,8İstismar yokEPSS %1

    claroline · claroline22 Tem 2008

  • CVE-2007-4718
    22İzleyin

    Directory traversal vulnerability in inc/lib/language.lib.php in Claroline before 1.8.6 allows remote attackers to include and execute arbit

    OrtaCVSS 5,1Kavram kanıtıEPSS %7

    claroline · claroline5 Eyl 2007

  • CVE-2022-37162
    21İzleyin

    Claroline 13.5.7 and prior is vulnerable to Cross Site Scripting (XSS).

    OrtaCVSS 5,4İstismar yokEPSS %1

    claroline · claroline25 Ağu 2022

  • CVE-2022-37160
    21İzleyin

    Claroline 13.5.7 and prior allows an authenticated attacker to elevate privileges via the arbitrary creation of a privileged user.

    OrtaCVSS 5,4İstismar yokEPSS %1

    claroline · claroline25 Ağu 2022

  • CVE-2011-3716
    20İzleyin

    Claroline 1.9.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation

    OrtaCVSS 5,0İstismar yokEPSS %1

    claroline · claroline23 Eyl 2011

  • CVE-2006-1595
    19İzleyin

    Cross-site scripting (XSS) vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attackers to read arbitrary f

    OrtaCVSS 4,3Kavram kanıtıEPSS %5

    claroline · claroline3 Nis 2006

  • CVE-2008-3261
    18İzleyin

    Open redirect vulnerability in claroline/redirector.php in Claroline before 1.8.10 allows remote attackers to redirect users to arbitrary we

    OrtaCVSS 4,3Kavram kanıtıEPSS %5

    claroline · claroline22 Tem 2008

  • CVE-2008-3260
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.10 allow remote attackers to inject arbitrary web script or HTML

    OrtaCVSS 4,3Kavram kanıtıEPSS %5

    claroline · claroline22 Tem 2008

  • CVE-2008-3315
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web script or HTML via th

    OrtaCVSS 4,3Kavram kanıtıEPSS %2

    claroline · claroline25 Tem 2008

  • CVE-2009-1907
    18İzleyin

    Cross-site scripting (XSS) vulnerability in claroline/linker/notfound.php in Claroline 1.8.11 allows remote attackers to inject arbitrary we

    OrtaCVSS 4,3Kavram kanıtıEPSS %2

    claroline · claroline4 Haz 2009

  • CVE-2007-3517
    18İzleyin

    Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.3 allow remote attackers to inject arbitrary web script or HTML via the

    OrtaCVSS 4,3Kavram kanıtıEPSS %2

    claroline · claroline3 Tem 2007