CVE-2008-3315
Claroline 1.8.10 - Cross-Site Scripting via Multiple Parameters
Title source: llmExploitation Summary
EIP tracks 4 public exploits for CVE-2008-3315. PoCs published by DSecRG.
AI-analyzed exploit summary This exploit demonstrates a cross-site scripting (XSS) vulnerability in Claroline versions prior to 1.8.11. The vulnerability arises from insufficient input sanitization, allowing arbitrary script execution in the context of the affected site.
Description
Multiple cross-site scripting (XSS) vulnerabilities in Claroline 1.8.10 allow remote attackers to inject arbitrary web script or HTML via the (1) query string to (a) announcements/messages.php; (b) lostPassword.php and (c) profile.php in auth/; (d) calendar/myagenda.php; (e) group/group.php; (f) learningPath.php, (g) learningPathList.php, and (h) module.php in learnPath/; (i) phpbb/index.php; (j) courseLog.php, (k) course_access_details.php, (l) delete_course_stats.php, (m) userLog.php, and (n) user_access_details.php in tracking/; (o) user/user.php; and (p) user/userInfo.php; the (2) view parameter to (q) tracking/courseLog.php; and the (3) toolId parameter to (r) tracking/toolaccess_details.php. NOTE: this may overlap CVE-2006-3257 and CVE-2005-1374.
Exploits (4)
This exploit demonstrates a cross-site scripting (XSS) vulnerability in Claroline versions prior to 1.8.11. The vulnerability arises from insufficient input sanitization, allowing arbitrary script execution in the context of the affected site.
This exploit demonstrates a cross-site scripting (XSS) vulnerability in Claroline due to improper input sanitization. The PoC provides a URL that, when accessed, executes arbitrary JavaScript in the context of the affected site.
This exploit demonstrates a cross-site scripting (XSS) vulnerability in Claroline versions prior to 1.8.11. The vulnerability arises from insufficient input sanitization in the 'toolId' parameter of the 'toolaccess_details.php' script.
This exploit demonstrates a cross-site scripting (XSS) vulnerability in Claroline by injecting malicious script code via the 'view' parameter in the courseLog.php file. The payload uses the 'expression' style attribute to execute arbitrary JavaScript in the context of the affected site.