VYPR
← All advisories
Unrated severityNVD Advisory· Published May 3, 2005· Updated Jun 16, 2026

CVE-2005-1375

CVE-2005-1375

Description

Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary SQL commands via (1) learningPath.php, (2) learningPathAdmin.php, (3) learnPath_details.php, (4) modules_pool.php, (5) module.php, (6) uInfo parameter in userInfo.php, or (7) exo_id parameter to exercises_details.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Claroline/Claroline4 versions
    cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.6_beta:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.6_rc1:*:*:*:*:*:*:*
    • (no CPE)range: >=1.5.3 <=1.6 Release Candidate 1

Patches

Vulnerability mechanics

References

7

News mentions

0

No linked articles in our index yet.