BugTraq
Back to list
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
Claroline 1.7.2, sso identification vulnerability
Jan 20 2006 05:27PM
karmaguedon hotmail com
hi,
this is what we can read in file "/claroline/inc/claro_init_local.inc.php" :
[...]
$ssoCookieValue = md5( mktime() );
$sql = "UPDATE `".$tbl_sso."`
SET cookie = '".$ssoCookieValue."',
rec_time = NOW()
...
[ more ]
Privacy Statement
Copyright 2010, SecurityFocus
this is what we can read in file "/claroline/inc/claro_init_local.inc.php" :
[...]
$ssoCookieValue = md5( mktime() );
$sql = "UPDATE `".$tbl_sso."`
SET cookie = '".$ssoCookieValue."',
rec_time = NOW()
...
[ more ]