CVE-2005-1375

Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary SQL commands via (1) learningPath.php, (2) learningPathAdmin.php, (3) learnPath_details.php, (4) modules_pool.php, (5) module.php, (6) uInfo parameter in userInfo.php, or (7) exo_id parameter to exercises_details.php.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*
cpe:2.3:a:claroline:claroline:1.6_beta:*:*:*:*:*:*:*
cpe:2.3:a:claroline:claroline:1.6_rc1:*:*:*:*:*:*:*

History

No history.

Information

Published : 2005-05-03 04:00

Updated : 2024-02-04 16:52


NVD link : CVE-2005-1375

Mitre link : CVE-2005-1375

CVE.ORG link : CVE-2005-1375


JSON object : View

Products Affected

claroline

  • claroline