VYPR
← All advisories
Unrated severityNVD Advisory· Published May 3, 2005· Updated Apr 16, 2026

CVE-2005-1375

CVE-2005-1375

Description

Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary SQL commands via (1) learningPath.php, (2) learningPathAdmin.php, (3) learnPath_details.php, (4) modules_pool.php, (5) module.php, (6) uInfo parameter in userInfo.php, or (7) exo_id parameter to exercises_details.php.

Affected products

3
  • Claroline/Claroline3 versions
    cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.6_beta:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.6_rc1:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

7

News mentions

0

No linked articles in our index yet.