Vulnerability Database

296,278

Total vulnerabilities in the database

CVE-2005-1375

Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary SQL commands via (1) learningPath.php, (2) learningPathAdmin.php, (3) learnPath_details.php, (4) modules_pool.php, (5) module.php, (6) uInfo parameter in userInfo.php, or (7) exo_id parameter to exercises_details.php.

  • Published: May 3, 2005
  • Updated: Apr 13, 2023
  • CVE: CVE-2005-1375
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 7.5
  • AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Software From Fixed in
claroline / claroline 1.6_beta 1.6_beta.x
claroline / claroline 1.6_rc1 1.6_rc1.x
claroline / claroline 1.5.3 1.5.3.x