|
CVE Reference: CVE-2005-2598
|
|
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.
|
|
Original Page at CVE MITRE:
CVE-2005-2598
|
|
Description:
Multiple directory traversal vulnerabilities in Dokeos 1.6 and earlier, and possibly Claroline, allow remote attackers to (1) delete arbitrary files or directories via the delete parameter to claroline/scorm/scormdocument.php, (2) move arbitrary files via the move_to and move_file parameters to claroline/document/document.php, or determine the existence of arbitrary files via the file parameter to (3) claroline/scorm/showinframes.php or (4) claroline/scorm/contents.php.
|
|
CVE Status:
Candidate
|
|
References:
SAID
Secunia Advisory: SA16407
FULLDISC
http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/036345.html
http://seclists.org/lists/fulldisclosure/2005/Aug/0394.html
|
|
|
Return to the previous page.
|
