claro_init_local.inc.php in Claroline 1.7.2 uses guessable session cookies (MD5 hash of connection time), which allows remote attackers to hijack sessions and possibly gain administrative privileges.
Max CVSS
10.0
EPSS Score
1.57%
Published
2006-01-25
Updated
2017-07-20
Claroline 13.5.7 and prior is vulnerable to Remote code execution via arbitrary file upload.
Max CVSS
9.8
EPSS Score
0.74%
Published
2022-08-25
Updated
2022-08-27
2 vulnerabilities found