Claroline $_SERVER['PHP_SELF'] Parameter Multiple Cross-Site Scripting Vulnerabilities
BID:24742
Info
Claroline $_SERVER['PHP_SELF'] Parameter Multiple Cross-Site Scripting Vulnerabilities
| Bugtraq ID: | 24742 |
| Class: | Input Validation Error |
| CVE: |
CVE-2007-3517 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 02 2007 12:00AM |
| Updated: | May 07 2015 05:37PM |
| Credit: | munozferna reported these vulnerabilities. |
| Vulnerable: |
Claroline Claroline 1.8.3 Claroline Claroline 1.8.2 Claroline Claroline 1.8.1 Claroline Claroline 1.8 rc1 Claroline Claroline 1.8 Claroline Claroline 1.7.8 Claroline Claroline 1.7.7 Claroline Claroline 1.7.6 Claroline Claroline 1.7.5 Claroline Claroline 1.7.4 Claroline Claroline 1.7.3 Claroline Claroline 1.7.2 Claroline Claroline 1.7.1 Claroline Claroline 1.6 rc1 Claroline Claroline 1.6 beta Claroline Claroline 1.6 Claroline Claroline 1.5.4 Claroline Claroline 1.5.3 Claroline Claroline 1.5 Claroline Claroline 1.7 Claroline Claroline 1.6 Claroline Claroline 1.5 Claroline Claroline 1.4 Claroline Claroline 1.3 Claroline Claroline 1.2 |
| Not Vulnerable: |
Claroline Claroline 1.8.4 |
Discussion
Claroline $_SERVER['PHP_SELF'] Parameter Multiple Cross-Site Scripting Vulnerabilities
Claroline is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Versions prior to Claroline 1.8.4 are vulnerable.
Claroline is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Versions prior to Claroline 1.8.4 are vulnerable.
Exploit / POC
Claroline $_SERVER['PHP_SELF'] Parameter Multiple Cross-Site Scripting Vulnerabilities
Attackers may exploit these issues through a browser.
The following proof-of-concept URI is available:
http://www.example.com/index.php?[XSS]
Attackers may exploit these issues through a browser.
The following proof-of-concept URI is available:
http://www.example.com/index.php?[XSS]
Solution / Fix
Claroline $_SERVER['PHP_SELF'] Parameter Multiple Cross-Site Scripting Vulnerabilities
Solution:
The vendor has released Claroline 1.8.4 to address this issue. Please see the references for more information.
Claroline Claroline 1.2
Claroline Claroline 1.5
Claroline Claroline 1.4
Claroline Claroline 1.3
Claroline Claroline 1.6
Claroline Claroline 1.7
Claroline Claroline 1.5
Claroline Claroline 1.5.3
Claroline Claroline 1.5.4
Claroline Claroline 1.6
Claroline Claroline 1.6 rc1
Claroline Claroline 1.6 beta
Claroline Claroline 1.7.1
Claroline Claroline 1.7.2
Claroline Claroline 1.7.3
Claroline Claroline 1.7.4
Claroline Claroline 1.7.5
Claroline Claroline 1.7.6
Claroline Claroline 1.7.7
Claroline Claroline 1.7.8
Claroline Claroline 1.8
Claroline Claroline 1.8 rc1
Claroline Claroline 1.8.1
Claroline Claroline 1.8.2
Claroline Claroline 1.8.3
Solution:
The vendor has released Claroline 1.8.4 to address this issue. Please see the references for more information.
Claroline Claroline 1.2
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.5
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.4
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.3
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.6
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.7
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.5
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.5.3
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.5.4
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.6
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.6 rc1
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.6 beta
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.7.1
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.7.2
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.7.3
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.7.4
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.7.5
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.7.6
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.7.7
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.7.8
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.8
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.8 rc1
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.8.1
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.8.2
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
Claroline Claroline 1.8.3
-
Claroline claroline184.tar.gz
http://www.claroline.net/dlarea/claroline184.tar.gz
References
Claroline $_SERVER['PHP_SELF'] Parameter Multiple Cross-Site Scripting Vulnerabilities
References:
References:
- Bugs Claroline 1.8.4 (stable version) (Claroline)
- Claroline Homepage (Claroline)