CVE-2006-1595

Cross-site scripting (XSS) vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attackers to read arbitrary files via ".."…

published April 3, 2006

CVSS
—
EPSS
5%
Percentile
92.7
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attackers to read arbitrary files via ".." sequences in the file parameter in a rqEditHtml command.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05470 · 92.7th percentile
Published
2006-04-03T10:00Z
EPSS history
Timeline
  • 03 APR 10:00Z
    Cross-site scripting (XSS) vulnerability in document/rqmkhtml.php in Claroline 1.7.4 and earlier allows remote attackers to read arbitrary files via ".."…
    cvelistv5