Full title: Claroline e-Learning 1.8.1 Privilege Escalation Vulnerability Category: web applications Platform: php Due to insufficient permission checking in profile.php any user can assign hem or her self to any organization by issueing a single http request. # 0day.today @ http://0day.today/