CVEvulnerability

CVE-2005-1375

7.5 HIGH Published 2005-05-03 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-05-03
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary SQL commands via (1) learningPath.php, (2) learningPathAdmin.php, (3) learnPath_details.php, (4) modules_pool.php, (5) module.php, (6) uInfo parameter in userInfo.php, or (7) exo_id parameter to exercises_details.php.

Affected configurations

• claroline claroline 1.5.3 • claroline claroline 1.6 beta • claroline claroline 1.6 rc1

References

http://marc.info/?l=bugtraq&m=111464607103407&w=2 marc.info
http://secunia.com/advisories/15161 Exploit, Patch
http://secunia.com/advisories/15725 secunia.com
http://securitytracker.com/id?1013822 Exploit, Patch
http://www.claroline.net/news.php#85 Patch
http://www.securityfocus.com/bid/13407 Exploit, Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/20298 exchange.xforce.ibmcloud.com
http://marc.info/?l=bugtraq&m=111464607103407&w=2 marc.info
http://secunia.com/advisories/15161 Exploit, Patch
http://secunia.com/advisories/15725 secunia.com
http://securitytracker.com/id?1013822 Exploit, Patch
http://www.claroline.net/news.php#85 Patch
http://www.securityfocus.com/bid/13407 Exploit, Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/20298 exchange.xforce.ibmcloud.com