CVE-2005-1375

Multiple SQL injection vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary SQL commands via (1) learningPath.php, (2) learningPathAdmin.php, (3) learnPath_details.php, (4) modules_pool.php, (5) module.php, (6) uInfo parameter in userInfo.php, or (7) exo_id parameter to exercises_details.php.

• http://marc.info/?l=bugtraq&m=111464607103407&w=2
• http://secunia.com/advisories/15161Exploit, Patch
• http://secunia.com/advisories/15725
• http://securitytracker.com/id?1013822Exploit, Patch
• http://www.claroline.net/news.php#85Patch
• http://www.securityfocus.com/bid/13407Exploit, Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20298
• http://marc.info/?l=bugtraq&m=111464607103407&w=2
• http://secunia.com/advisories/15161Exploit, Patch
• http://secunia.com/advisories/15725
• http://securitytracker.com/id?1013822Exploit, Patch
• http://www.claroline.net/news.php#85Patch
• http://www.securityfocus.com/bid/13407Exploit, Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20298

Published

May 3, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-1369The (1) it87 and (2) via686a drivers in I2C for Linux 2.6.x …
• CVE-2005-1370Unknown vulnerability in Radia Management Agent (RMA) in HP …
• CVE-2005-1371BPFTPServer service in BulletProof FTP Server 2.4.0.31 does …
• CVE-2005-1372nvstatsmngr.exe process in BakBone NetVault 7.1 does not pro…
• CVE-2005-1373Multiple SQL injection vulnerabilities in index.php in Dream…
• CVE-2005-1374Multiple cross-site scripting (XSS) vulnerabilities in Claro…
• CVE-2005-1376Multiple directory traversal vulnerabilities in (1) document…
• CVE-2005-1377Multiple PHP remote file inclusion vulnerabilities in Clarol…
• CVE-2005-1378SQL injection vulnerability in posting_notes.php in the note…
• CVE-2005-1379The LAM runtime environment package (lam-runtime-7.0.6-2mdk)…
• CVE-2005-1380Cross-site scripting (XSS) vulnerability in BEA Admin Consol…
• CVE-2005-1381Multiple cross-site scripting (XSS) vulnerabilities in Oracl…