CVE-2006-2284

CVE-2006-2284 describes multiple remote file inclusion vulnerabilities in Claroline 1.7.5, affecting Claroline and Dokeos products. Attackers can exploit this by injecting malicious PHP code via specific URL parameters in ldap.inc.php and casProcess.inc.php. With a CVSS score of 6.8, this vulnerability is moderately severe, allowing remote attackers to execute arbitrary code with medium attack complexity, potentially leading to partial confidentiality, integrity, and availability impacts. While not in the KEV catalog and lacking Metasploit/Nuclei modules, exploit code is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.