| CVSS Meta Temp Score | Current Exploit Price (≈) | CTI Interest Score |
|---|---|---|
| 5.1 | $0-$5k | 1.10 |
A vulnerability was found in Claroline 1.8.5 (Learning Management Software). It has been classified as problematic. Affected is an unknown code block in the library inc/lib/language.lib.php. The manipulation of the argument language with an unknown input leads to a directory traversal vulnerability. CWE is classifying the issue as CWE-22. This is going to have an impact on confidentiality, integrity, and availability.
The weakness was disclosed 07/31/2007 by Fernando Munoz (Website). The advisory is shared for download at claroline.net. This vulnerability is traded as CVE-2007-4718 since 09/05/2007. The exploitability is told to be difficult. It is possible to launch the attack remotely. The exploitation doesn’t require any form of authentication. Technical details and a exploit are known.
After 2 months, there has been an exploit disclosed. It is declared as proof-of-concept. The vulnerability scanner Nessus provides a plugin with the ID 26011 (Claroline inc/lib/language.lib.php language Parameter Traversal Local File Inclusion), which helps to determine the existence of the flaw in a target environment. It is assigned to the family CGI abuses.
Upgrading to version 1.8.5 eliminates this vulnerability.
The vulnerability is also documented in the databases at SecurityFocus (BID 25521), X-Force (36421), Secunia (SA26685), Vulnerability Center (SBV-16052) and Tenable (26011). The entries 38669, 38651, 86167 and 86168 are pretty similar.
Type
Name
VulDB Meta Base Score: 5.6
VulDB Meta Temp Score: 5.1
VulDB Base Score: 5.6
VulDB Temp Score: 5.1
VulDB Vector: 🔍
VulDB Reliability: 🔍
| AV | AC | Au | C | I | A |
|---|---|---|---|---|---|
| 🔍 | 🔍 | 🔍 | 🔍 | 🔍 | 🔍 |
| 🔍 | 🔍 | 🔍 | 🔍 | 🔍 | 🔍 |
| 🔍 | 🔍 | 🔍 | 🔍 | 🔍 | 🔍 |
| Vector | Complexity | Authentication | Confidentiality | Integrity | Availability |
|---|---|---|---|---|---|
| unlock | unlock | unlock | unlock | unlock | unlock |
| unlock | unlock | unlock | unlock | unlock | unlock |
| unlock | unlock | unlock | unlock | unlock | unlock |
VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍
NVD Base Score: 🔍
Class: Directory traversal
CWE: CWE-22
ATT&CK: Unknown
Local: No
Remote: Yes
Availability: 🔍
Status: Proof-of-Concept
Price Prediction: 🔍
Current Price Estimation: 🔍
| 0-Day | unlock | unlock | unlock | unlock |
|---|---|---|---|---|
| Today | unlock | unlock | unlock | unlock |
Nessus ID: 26011
Nessus Name: Claroline inc/lib/language.lib.php language Parameter Traversal Local File Inclusion
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍
Threat Intelligence
Interest: 🔍
Active Actors: 🔍
Active APT Groups: 🔍Recommended: Upgrade
Status: 🔍
0-Day Time: 🔍
Exploit Delay Time: 🔍
Upgrade: Claroline 1.8.5
07/31/2007 🔍
09/03/2007 🔍
09/03/2007 🔍
09/03/2007 🔍
09/05/2007 🔍
09/05/2007 🔍
09/10/2007 🔍
09/16/2007 🔍
12/03/2007 🔍
03/16/2015 🔍
08/11/2017 🔍
07/21/2021 🔍Advisory: claroline.net
Researcher: Fernando Munoz
Status: Not defined
Confirmation: 🔍
CVE: CVE-2007-4718 (🔍)
SecurityFocus: 25521 – Claroline Local File Include and Cross-Site Scripting Vulnerabilities
Secunia: 26685
X-Force: 36421
Vulnerability Center: 16052 – Claroline < 4.8.6 Directory Traversal Vulnerability Allows Inclusion and Execution of Local Files, High
OSVDB: 38987 – Claroline inc/lib/language.lib.php language Parameter Traversal Local File Inclusion
Vupen: ADV-2007-3045
scip Labs: https://www.scip.ch/en/?labs.20161013
See also: 🔍
Created: 03/16/2015 12:18
Updated: 07/21/2021 19:25
Changes: (3) source_nessus_risk exploit_price_0day vulnerability_cvss2_nvd_basescore
Complete: 🔍
Upgrade your account now!
