CVE

Id
12581  
CVE No.
CVE-2005-1375  
Status
Candidate  
Description
Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary SQL commands via (1) learningPath.php, (2) learningPathAdmin.php, (3) learnPath_details.php, (4) modules_pool.php, (5) module.php, (6) uInfo parameter in userInfo.php, or (7) exo_id parameter to exercises_details.php.  
Phase
Assigned (20050502)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
90502 12581 CVE-2005-1375 BUGTRAQ:20050427 ZRCSA-200501 - Multiple vulnerabilities in Claroline  View
90503 12581 CVE-2005-1375 URL:http://marc.info/?l=bugtraq&m=111464607103407&w=2  View
90504 12581 CVE-2005-1375 CONFIRM:http://www.claroline.net/news.php#85  View
90505 12581 CVE-2005-1375 BID:13407  View
90506 12581 CVE-2005-1375 URL:http://www.securityfocus.com/bid/13407  View
90507 12581 CVE-2005-1375 SECTRACK:1013822  View
90508 12581 CVE-2005-1375 URL:http://securitytracker.com/id?1013822  View
90509 12581 CVE-2005-1375 SECUNIA:15161  View
90510 12581 CVE-2005-1375 URL:http://secunia.com/advisories/15161  View
90511 12581 CVE-2005-1375 SECUNIA:15725  View
90512 12581 CVE-2005-1375 URL:http://secunia.com/advisories/15725  View
90513 12581 CVE-2005-1375 XF:claroline-multiple-sql-injection(20298)  View

Related JVN