Multiple PHP remote file inclusion vulnerabilities in Claroline 1.5.3 through 1.6 Release Candidate 1, and possibly Dokeos, allow remote attackers to execute arbitrary PHP code via unknown vectors.
https://exchange.xforce.ibmcloud.com/vulnerabilities/20300
https://euvd.enisa.europa.eu/vulnerability/EUVD-2005-1380
http://www.securityfocus.com/bid/13407
http://www.claroline.net/news.php#85
http://securitytracker.com/id?1013822
http://secunia.com/advisories/15725