CVE-2006-5256

PHP remote file inclusion vulnerability in claroline/inc/lib/import.lib.php in Claroline 1.8.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter.

Affected Software

Name	Vendor	Start Version	End Version
Claroline	Claroline	*	1.8.0 (including)
Claroline	Claroline	1.2 (including)	1.2 (including)
Claroline	Claroline	1.3 (including)	1.3 (including)
Claroline	Claroline	1.4 (including)	1.4 (including)
Claroline	Claroline	1.5 (including)	1.5 (including)
Claroline	Claroline	1.5.3 (including)	1.5.3 (including)
Claroline	Claroline	1.5.4 (including)	1.5.4 (including)
Claroline	Claroline	1.6 (including)	1.6 (including)
Claroline	Claroline	1.6_beta (including)	1.6_beta (including)
Claroline	Claroline	1.6_rc1 (including)	1.6_rc1 (including)
Claroline	Claroline	1.7 (including)	1.7 (including)
Claroline	Claroline	1.7.1 (including)	1.7.1 (including)
Claroline	Claroline	1.7.2 (including)	1.7.2 (including)
Claroline	Claroline	1.7.3 (including)	1.7.3 (including)
Claroline	Claroline	1.7.4 (including)	1.7.4 (including)
Claroline	Claroline	1.7.5 (including)	1.7.5 (including)
Claroline	Claroline	1.7.6 (including)	1.7.6 (including)
Claroline	Claroline	1.7.7 (including)	1.7.7 (including)

NVD	https://nvd.nist.gov/vuln/detail/CVE-2006-5256
CWE	https://cwe.mitre.org/data/definitions/NVD-Other.html

Affected Software

References