Vulnerabilities

TI-2008-00792 CVE-2008-0826 · GHSA-m87f-ggqj-7457

Cross-site scripting (XSS) vulnerability in Claroline before 1.8.9 allows remote…

LOW 22

Cross-site scripting (XSS) vulnerability in Claroline before 1.8.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01033 Published 2008-02-19 No fix listed CWE-79

TI-2008-00791 CVE-2008-0825 · GHSA-4qx2-cqhq-gwvv

SQL injection vulnerability in Claroline before 1.8.9 allows remote attackers to execute…

LOW 35

SQL injection vulnerability in Claroline before 1.8.9 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01063 Published 2008-02-19 No fix listed CWE-89

TI-2008-00790 CVE-2008-0824 · GHSA-rw5w-mqpw-qm5g

Unspecified vulnerability in the php2phps function in Claroline before 1.8.9 has unknown impact and attack vectors.

MEDIUM 45

Unspecified vulnerability in the php2phps function in Claroline before 1.8.9 has unknown impact and attack vectors.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.01239 Published 2008-02-19 No fix listed

Vulnerabilities

Filters

Cross-site scripting (XSS) vulnerability in Claroline before 1.8.9 allows remote…

SQL injection vulnerability in Claroline before 1.8.9 allows remote attackers to execute…

Unspecified vulnerability in the php2phps function in Claroline before 1.8.9 has unknown impact and attack vectors.