[VIM] Legitimate spelling diffs in Claroline report; XSS unfixed?
jericho at attrition.org
Sun May 15 03:38:21 EDT 2005
: BUGTRAQ:20050427 ZRCSA-200501 - Multiple vulnerabilities in Claroline
Finally got to this as you can probably guess from one of my last mails..
: The reporters list "exercise_result.php" and "exercice_submit.php",
: which might suggest a spelling discrepancy or typo ("exercise"
: vs. "exercice") but the CVS logs for Claroline indicate that this
: discrepancy is legit:
: The CVS log for exercise_result.php does not include any recent mods
: that specifically mention XSS, nor do the changes show typical XSS
: protections, and yet it is mentioned by the original researchers as an
: attack vector. Possibly a library problem?
The timeline included with the disclosure suggests the vendor was well in
the loop and disclosure occured after release of a patched version. Based
on that and your comment above, along with the fact Sieg Fried clearly
examined some library scripts (look at the remote file inclusions).. i'd
imagine the XSS and/or the SQL injection problems are likely due to some
Without followup or examining the files further..
More information about the VIM