263 matches found
Dokeos 1.x - forumviewthread.php?forum Cross-Site Scripting
Dokeos 1.x - forumviewthread.php?forum Cross-Site Scripting source: https://www.securityfocus.com/bid/26992/info Dokeos is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...
Dokeos 1.x - forumviewforum.php?forum Cross-Site Scripting
Dokeos 1.x - forumviewforum.php?forum Cross-Site Scripting source: https://www.securityfocus.com/bid/26992/info Dokeos is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...
Dokeos 1.x - '/work/work.php?display_upload_form Action origin' Cross-Site Scripting
source: https://www.securityfocus.com/bid/26992/info Dokeos is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
Dokeos 1.x - '/forum/viewthread.php?forum' Cross-Site Scripting
source: https://www.securityfocus.com/bid/26992/info Dokeos is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
Dokeos 1.x - workwork.php?display_upload_form Action origin Cross-Site Scripting
Dokeos 1.x - workwork.php?displayuploadform Action origin Cross-Site Scripting source: https://www.securityfocus.com/bid/26992/info Dokeos is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...
Dokeos 1.x - '/forum/viewforum.php?forum' Cross-Site Scripting
source: https://www.securityfocus.com/bid/26992/info Dokeos is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
Unrestricted file upload
Unrestricted file upload vulnerability in the "My productions" component for main/auth/profile.php aka the "My profile" page in Dokeos 1.8.4 allows remote authenticated users to upload and execute arbitrary PHP files via a filename with a double extension, which can then be accessed through a URI...
CVE-2007-6479
Unrestricted file upload vulnerability in the "My productions" component for main/auth/profile.php aka the "My profile" page in Dokeos 1.8.4 allows remote authenticated users to upload and execute arbitrary PHP files via a filename with a double extension, which can then be accessed through a URI...
CVE-2007-6479
Unrestricted file upload vulnerability in the "My productions" component for main/auth/profile.php aka the "My profile" page in Dokeos 1.8.4 allows remote authenticated users to upload and execute arbitrary PHP files via a filename with a double extension, which can then be accessed through a URI...
CVE-2007-6479
In Dokeos 1.8.4, the component My productions (main/auth/profile.php) has an unrestricted file upload flaw. Remote authenticated users can upload and execute arbitrary PHP files by using a filename with a double extension, accessible under main/upload/users/ .
CVE-2007-6479
Unrestricted file upload vulnerability in the "My productions" component for main/auth/profile.php aka the "My profile" page in Dokeos 1.8.4 allows remote authenticated users to upload and execute arbitrary PHP files via a filename with a double extension, which can then be accessed through a URI...
Dokeos 1.8.4 Bypass Upload Shell From Your Profile Vulnerability
No description provided by source. Name : dokeos-1.8.4 Bypass Upload Shell From Your Profile Your Cpanel Download From : http://www.dokeos.com/download/dokeos-1.8.4.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Platform Dokeos 1.8.4 漏 2007...
Dokeos 1.8.4 Bypass Upload Shell From Your Profile Vulnerability
No description provided by source. Name : dokeos-1.8.4 Bypass Upload Shell From Your Profile Your Cpanel Download From : http://www.dokeos.com/download/dokeos-1.8.4.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Platform Dokeos 1.8.4 2007...
Dokeos 1.8.4 - Arbitrary File Upload
Dokeos 1.8.4 - Arbitrary File Upload Name : dokeos-1.8.4 Bypass Upload Shell From Your Profile Your Cpanel Download From : http://www.dokeos.com/download/dokeos-1.8.4.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Platform Dokeos 1.8.4 © 2007...
Dokeos 1.8.4 Bypass Upload Shell From Your Profile Vulnerability
Exploit for unknown platform in category web applications ================================================================ Dokeos 1.8.4 Bypass Upload Shell From Your Profile Vulnerability ================================================================ Name : dokeos-1.8.4 Bypass Upload Shell From...
Dokeos 1.8.4 - Arbitrary File Upload
Name : dokeos-1.8.4 Bypass Upload Shell From Your Profile Your Cpanel Download From : http://www.dokeos.com/download/dokeos-1.8.4.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Platform Dokeos 1.8.4 © 2007...
Sql injection
SQL injection vulnerability in main/auth/myprogress.php in Dokeos 1.8.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the course parameter...
CVE-2007-2902
SQL injection vulnerability in main/auth/myprogress.php in Dokeos 1.8.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the course parameter...
CVE-2007-2901
Multiple cross-site scripting XSS vulnerabilities in Dokeos 1.8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the img parameter to main/inc/lib/fckeditor/editor/plugins/ImageManager/editor.php and other unspecified vectors...