Detections
Analytics
Claroline Multiple RemoteVulnerabilities (RFI, Traversal, XSS)
high Nessus Plugin ID 21167
Language:
Synopsis
The remote web server contains a PHP application that is affected by several issues.Description
The remote host is running Claroline, an open source, web-based, collaborative learning environment written in PHP.The version of Claroline installed on the remote host fails to sanitize input to the 'includePath' parameter before using it in the 'claroline/learnPath/include/scormExport.inc.php' script to include files with PHP code. Provided PHP's 'register_globals' setting is enabled, an unauthenticated attacker may be able to exploit this issue to view arbitrary files on the remote host or to execute arbitrary PHP code, possibly taken from third-party hosts.
In addition, the installation reportedly suffers from a cross-site scripting and several information disclosure vulnerabilities.
Solution
Apply the patch appropriate for the installed version of Claroline as listed in the vendor advisory above.See Also
Plugin Details
Severity: High
ID: 21167
File Name: claroline_mult_vulns2.nasl
Version: 1.25
Type: remote
Family: CGI abuses
Published: 4/3/2006
Updated: 6/1/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.6
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 5.9
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
Required KB Items: www/claroline
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: Exploits are available
Exploited by Nessus: true
Patch Publication Date: 4/1/2006
Vulnerability Publication Date: 3/30/2006