CVE-2005-1375

This Perl script exploits a SQL injection vulnerability in Claroline E-Learning Application by injecting a UNION-based SQL query to extract user credentials from the database. It targets two specific endpoints: userInfo.php and exercises_details.php.

This PHP script exploits a SQL injection vulnerability in Claroline E-Learning Application by crafting malicious HTTP GET requests to extract user credentials from the database. It targets either 'userInfo.php' or 'exercises_details.php' with UNION-based SQLi payloads.

The provided text describes multiple vulnerabilities in Claroline e-Learning Application, including SQL injection, XSS, directory traversal, and remote file inclusion. It includes an example SQL injection payload but lacks executable exploit code.

The provided text describes multiple vulnerabilities in Claroline e-Learning Application, including SQL injection, XSS, directory traversal, and remote file inclusion. It includes an example SQL injection payload for exploiting the vulnerability.