2007-4718 | Claroline language.lib.php path traversal (BID-25521 / XFDB-36421)


CVSS Meta Temp Score Current Exploit Price (≈) CTI Interest Score
5.1 $0-$5k 1.10

A vulnerability was found in Claroline 1.8.5 (Learning Management Software). It has been classified as problematic. Affected is an unknown code block in the library inc/lib/language.lib.php. The manipulation of the argument language with an unknown input leads to a directory traversal vulnerability. CWE is classifying the issue as CWE-22. This is going to have an impact on confidentiality, integrity, and availability.

The weakness was disclosed 07/31/2007 by Fernando Munoz (Website). The advisory is shared for download at claroline.net. This vulnerability is traded as CVE-2007-4718 since 09/05/2007. The exploitability is told to be difficult. It is possible to launch the attack remotely. The exploitation doesn’t require any form of authentication. Technical details and a exploit are known.

After 2 months, there has been an exploit disclosed. It is declared as proof-of-concept. The vulnerability scanner Nessus provides a plugin with the ID 26011 (Claroline inc/lib/language.lib.php language Parameter Traversal Local File Inclusion), which helps to determine the existence of the flaw in a target environment. It is assigned to the family CGI abuses.

Upgrading to version 1.8.5 eliminates this vulnerability.

The vulnerability is also documented in the databases at SecurityFocus (BID 25521), X-Force (36421), Secunia (SA26685), Vulnerability Center (SBV-16052) and Tenable (26011). The entries 38669, 38651, 86167 and 86168 are pretty similar.

Type

Name

VulDB Meta Base Score: 5.6
VulDB Meta Temp Score: 5.1

VulDB Base Score: 5.6
VulDB Temp Score: 5.1
VulDB Vector: 🔍
VulDB Reliability: 🔍

AV AC Au C I A
🔍 🔍 🔍 🔍 🔍 🔍
🔍 🔍 🔍 🔍 🔍 🔍
🔍 🔍 🔍 🔍 🔍 🔍
Vector Complexity Authentication Confidentiality Integrity Availability
unlock unlock unlock unlock unlock unlock
unlock unlock unlock unlock unlock unlock
unlock unlock unlock unlock unlock unlock


VulDB Base Score: 🔍
VulDB Temp Score: 🔍
VulDB Reliability: 🔍

NVD Base Score: 🔍

Class: Directory traversal
CWE: CWE-22
ATT&CK: Unknown

Local: No
Remote: Yes

Availability: 🔍
Status: Proof-of-Concept

Price Prediction: 🔍
Current Price Estimation: 🔍


0-Day unlock unlock unlock unlock
Today unlock unlock unlock unlock


Nessus ID: 26011
Nessus Name: Claroline inc/lib/language.lib.php language Parameter Traversal Local File Inclusion
Nessus File: 🔍
Nessus Risk: 🔍
Nessus Family: 🔍

Threat Intelligenceinfoedit

Interest: 🔍
Active Actors: 🔍
Active APT Groups: 🔍Recommended: Upgrade
Status: 🔍

0-Day Time: 🔍
Exploit Delay Time: 🔍

Upgrade: Claroline 1.8.5

07/31/2007 🔍
09/03/2007 +34 days 🔍
09/03/2007 +0 days 🔍
09/03/2007 +0 days 🔍
09/05/2007 +2 days 🔍
09/05/2007 +0 days 🔍
09/10/2007 +5 days 🔍
09/16/2007 +6 days 🔍
12/03/2007 +78 days 🔍
03/16/2015 +2659 days 🔍
08/11/2017 +879 days 🔍
07/21/2021 +1440 days 🔍Advisory: claroline.net
Researcher: Fernando Munoz
Status: Not defined
Confirmation: 🔍

CVE: CVE-2007-4718 (🔍)
SecurityFocus: 25521 – Claroline Local File Include and Cross-Site Scripting Vulnerabilities
Secunia: 26685
X-Force: 36421
Vulnerability Center: 16052 – Claroline < 4.8.6 Directory Traversal Vulnerability Allows Inclusion and Execution of Local Files, High
OSVDB: 38987 – Claroline inc/lib/language.lib.php language Parameter Traversal Local File Inclusion
Vupen: ADV-2007-3045

scip Labs: https://www.scip.ch/en/?labs.20161013
See also: 🔍

Created: 03/16/2015 12:18
Updated: 07/21/2021 19:25
Changes: (3) source_nessus_risk exploit_price_0day vulnerability_cvss2_nvd_basescore
Complete: 🔍

Upgrade your account now!



Source link