← Database

CVE-2007-4717

LOW CVSS: 3.5 Published: 2007-09-05 Modified: 2026-06-16

Description

Multiple cross-site scripting (XSS) vulnerabilities in Claroline before 1.8.6 allow remote authenticated administrators to inject arbitrary web script or HTML via the (1) dir parameter in admin/adminusers.php, the (2) action parameter in admin/advancedUserSearch.php, and the (3) view parameter in admin/campusProblem.php.

Affected Platforms

Claroline Claroline

Weakness Type

CWE-79

References