CVE-2006-1595

The exploit describes an information disclosure vulnerability in Claroline due to improper input sanitization, allowing attackers to retrieve arbitrary files via a crafted URL. No actual exploit code is provided, only a description and example URL.

The provided text describes a cross-site scripting (XSS) vulnerability in Claroline, where user-supplied input is not properly sanitized. The issue allows arbitrary script execution in the context of the affected site, potentially leading to credential theft.

This exploit targets Claroline <= 1.7.4 via a remote command execution vulnerability in 'scormExport.inc.php' due to unsafe file inclusion when 'register_globals' and 'allow_url_fopen' are enabled. It crafts an HTTP request to include a malicious remote PHP script, executing arbitrary commands.