Claroline Rqmkhtml.PHP Information Disclosure Vulnerability
BID:17343
Info
Claroline Rqmkhtml.PHP Information Disclosure Vulnerability
| Bugtraq ID: | 17343 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 31 2006 12:00AM |
| Updated: | May 08 2006 09:59PM |
| Credit: | rgod is credited with the discovery of this vulnerability. |
| Vulnerable: |
Claroline Claroline 1.7.4 Claroline Claroline 1.7.2 Claroline Claroline 1.6 rc1 Claroline Claroline 1.6 beta Claroline Claroline 1.6 Claroline Claroline 1.5.4 Claroline Claroline 1.5.3 Claroline Claroline 1.5 |
| Not Vulnerable: |
Claroline Claroline 1.7.5 |
Discussion
Claroline Rqmkhtml.PHP Information Disclosure Vulnerability
Claroline is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid attackers in further attacks.
Claroline versions 1.7.4 and prior are vulnerable.
Claroline is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.
An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid attackers in further attacks.
Claroline versions 1.7.4 and prior are vulnerable.
Exploit / POC
Claroline Rqmkhtml.PHP Information Disclosure Vulnerability
This vulnerability may be exploited with a web client.
http://www.example.com/claroline/document/rqmkhtml.php?cmd=rqEditHtml&file=[file]
This vulnerability may be exploited with a web client.
http://www.example.com/claroline/document/rqmkhtml.php?cmd=rqEditHtml&file=[file]
Solution / Fix
Claroline Rqmkhtml.PHP Information Disclosure Vulnerability
Solution:
The vendor has released a patch to address this issue; please see the reference section for further details.
Claroline Claroline 1.5
Claroline Claroline 1.5.3
Claroline Claroline 1.5.4
Claroline Claroline 1.6
Claroline Claroline 1.6 rc1
Claroline Claroline 1.6 beta
Claroline Claroline 1.7.2
Claroline Claroline 1.7.4
Solution:
The vendor has released a patch to address this issue; please see the reference section for further details.
Claroline Claroline 1.5
-
Claroline claroline.patch15401.zip
Patch for versions 1.5.x
http://www.claroline.net/dlarea/claroline.patch15401.zip>http://www.cl aroline.net/dlarea/claroline.patch15401.zip -
Claroline claroline175.tar.gz
http://www.claroline.net/dlarea/claroline175.tar.gz
Claroline Claroline 1.5.3
-
Claroline claroline.patch15401.zip
Patch for versions 1.5.x
http://www.claroline.net/dlarea/claroline.patch15401.zip>http://www.cl aroline.net/dlarea/claroline.patch15401.zip -
Claroline claroline175.tar.gz
http://www.claroline.net/dlarea/claroline175.tar.gz
Claroline Claroline 1.5.4
-
Claroline claroline.patch15401.zip
Patch for versions 1.5.x
http://www.claroline.net/dlarea/claroline.patch15401.zip>http://www.cl aroline.net/dlarea/claroline.patch15401.zip -
Claroline claroline175.tar.gz
http://www.claroline.net/dlarea/claroline175.tar.gz
Claroline Claroline 1.6
-
Claroline claroline.patch16301.zip
Patch for versions 1.6.x
http://www.claroline.net/dlarea/claroline.patch16301.zip>http://www.cl aroline.net/dlarea/claroline.patch16301.zip -
Claroline claroline175.tar.gz
http://www.claroline.net/dlarea/claroline175.tar.gz
Claroline Claroline 1.6 rc1
-
Claroline claroline.patch16301.zip
Patch for versions 1.6.x
http://www.claroline.net/dlarea/claroline.patch16301.zip>http://www.cl aroline.net/dlarea/claroline.patch16301.zip -
Claroline claroline175.tar.gz
http://www.claroline.net/dlarea/claroline175.tar.gz
Claroline Claroline 1.6 beta
-
Claroline claroline.patch16301.zip
Patch for versions 1.6.x
http://www.claroline.net/dlarea/claroline.patch16301.zip>http://www.cl aroline.net/dlarea/claroline.patch16301.zip -
Claroline claroline175.tar.gz
http://www.claroline.net/dlarea/claroline175.tar.gz
Claroline Claroline 1.7.2
-
Claroline claroline.patch17401.zip
Patch for versions 1.7.x
http://www.claroline.net/dlarea/claroline.patch17401.zip>http://www.cl aroline.net/dlarea/claroline.patch17401.zip -
Claroline claroline175.tar.gz
http://www.claroline.net/dlarea/claroline175.tar.gz
Claroline Claroline 1.7.4
-
Claroline claroline.patch17401.zip
Patch for versions 1.7.x
http://www.claroline.net/dlarea/claroline.patch17401.zip>http://www.cl aroline.net/dlarea/claroline.patch17401.zip -
Claroline claroline175.tar.gz
http://www.claroline.net/dlarea/claroline175.tar.gz
References
Claroline Rqmkhtml.PHP Information Disclosure Vulnerability
References:
References:
- Changelog 1.7.x (Claroline)
- Claroline Homepage (Claroline)
- Claroline News (Claroline)
- rgod exploit - Claroline<=1.7.4 (rgod)