CVE-2006-1595

Description

Cross-site scripting (XSS) vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attackers to read arbitrary files via ".." sequences in the file parameter in a rqEditHtml command.

Weakness classification

• nvd@nist.gov: NVD-CWE-Other

Primary references

• cve@mitre.org — Exploit
• cve@mitre.org — Exploit
• cve@mitre.org — Exploit, Vendor Advisory
• cve@mitre.org
• cve@mitre.org — Exploit
• cve@mitre.org — Exploit
• cve@mitre.org
• cve@mitre.org
• cve@mitre.org
• af854a3a-2127-422b-91ae-364da2661108 — Exploit
• af854a3a-2127-422b-91ae-364da2661108 — Exploit
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Vendor Advisory