Unrated severityNVD Advisory· Published May 3, 2005· Updated Apr 16, 2026

CVE-2005-1377

Description

Multiple PHP remote file inclusion vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary PHP code via unknown vectors.

Affected products

Claroline/Claroline3 versions
cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*
- cpe:2.3:a:claroline:claroline:1.6_beta:*:*:*:*:*:*:*
- cpe:2.3:a:claroline:claroline:1.6_rc1:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.claroline.net/news.phpnvdPatch
secunia.com/advisories/15161nvdExploitPatch
securitytracker.com/idnvdExploitPatch
www.securityfocus.com/bid/13407nvdExploitPatch
marc.infonvd
secunia.com/advisories/15725nvd
exchange.xforce.ibmcloud.com/vulnerabilities/20300nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000