|
Family: CGI abuses --> Category: attack
Claroline includePath Parameter Remote File Include Vulnerability Vulnerability Scan
Vulnerability Scan Summary Tries to read a local file using Claroline
Detailed Explanation for this Vulnerability Test
Synopsis :
The remote web server contains a PHP application that is prone to
remote file inclusion attacks.
Description :
The remote host is running Claroline, an open-source, web-based,
collaborative learning environment written in PHP.
The version of Claroline installed on the remote host fails to
sanitize input to the 'includePath' parameter before using it to
include PHP code in the 'claroline/auth/extauth/drivers/mambo.inc.php'
and 'claroline/auth/extauth/drivers/postnuke.inc.php' scripts.
Provided PHP's 'register_globals' setting is enabled, an
unauthenticated attacker may be able to exploit these flaws to view
arbitrary files on the remote host or to execute arbitrary PHP code,
possibly taken from third-party hosts.
See also :
http://downloads.securityfocus.com/vulnerabilities/exploits/claroline-lteq1.7.6-rfi.txt
Solution :
Unknown at this time.
Threat Level:
Medium / CVSS Base Score : 6
(AV:R/AC:H/Au:NR/C:P/A:P/I:P/B:N)
Click HERE for more information and discussions on this network vulnerability scan.
|