Multiple directory traversal vulnerabilities in (1) document.php or (2) insertMyDoc.php in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote project administrators to upload arbitrary files.Referenceshttp://www.securityfocus.com/bid/13407http://secunia.com/advisories/15161http://marc.info/?l=bugtraq&m=111464607103407&w=2http://www.claroline.net/news.php#85https://exchange.xforce.ibmcloud.com/vulnerabilities/20287http://securitytracker.com/id?1013822http://secunia.com/advisories/15725
