VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 22, 2008· Updated Apr 23, 2026

CVE-2008-3261

CVE-2008-3261

Description

Open redirect vulnerability in claroline/redirector.php in Claroline before 1.8.10 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.

Affected products

27
  • Claroline/Claroline27 versions
    cpe:2.3:a:claroline:claroline:*:*:*:*:*:*:*:*+ 26 more
    • cpe:2.3:a:claroline:claroline:*:*:*:*:*:*:*:*range: <=1.8.9
    • cpe:2.3:a:claroline:claroline:1.2:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.3:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.4:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.5:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.5.3:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.5.4:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.6:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.6_beta:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.6_rc1:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.7:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.7.1:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.7.2:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.7.3:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.7.4:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.7.5:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.7.6:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.7.7:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.8.0:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.8.1:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.8.2:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.8.3:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.8.4:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.8.5:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.8.6:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.8.7:*:*:*:*:*:*:*
    • cpe:2.3:a:claroline:claroline:1.8.8:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

6

News mentions

0

No linked articles in our index yet.