263 matches found
EUVD-2008-3350
Malware in sbrugna...
EUVD-2006-3918
Malware in sbrugna...
EUVD-2008-1231
Malware in sbrugna...
EUVD-2013-6167
Malware in sbrugna...
EUVD-2008-1232
Malware in sbrugna...
EUVD-2007-6540
Malware in sbrugna...
CVE-2012-5776
Dokeos 2.1.1 has multiple XSS issues involving "extra" parameters in main/auth/profile.php...
CVE-2009-2005
Cross-site request forgery CSRF vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors...
CVE-2012-5776
Dokeos 2.1.1 has multiple XSS issues involving "extra" parameters in main/auth/profile.php...
Cross site scripting
Dokeos 2.1.1 has multiple XSS issues involving "extra" parameters in main/auth/profile.php...
CVE-2012-5776
CVE-2012-5776 relates to multiple XSS vulnerabilities in Dokeos 2.1.1, specifically in the profile handling path (main/auth/profile.php) via parameters named for the extra_ set. The root cause is input handling that allows injected script code to be reflected in the user’s browser. Affected produ...
CVE-2012-5776
Dokeos 2.1.1 has multiple XSS issues involving "extra" parameters in main/auth/profile.php...
Dokeos 1.8.6.1 / 1.8.6.3 Arbitrary File Upload Exploit
Exploit for php platform in category web applications Exploit Title: Dokeos 1.8.6.3 and 1.8.6.1- Arbitrary File Upload Google Dork: "Plateforme Dokeos 1.8.6.3 " or 1.8.6.1 Exploit Author: Sohel Yousef Jellyfish security team Vendor Homepage: https://www.dokeos.com/ Software Link:...
Dokeos 1.8.6.1 / 1.8.6.3 Arbitrary File Upload
Exploit Title: Dokeos 1.8.6.3 and 1.8.6.1- Arbitrary File Upload Google Dork: "Plateforme Dokeos 1.8.6.3 " or 1.8.6.1 Date: 17/09/2019 Exploit Author: Sohel Yousef Jellyfish security team Vendor Homepage: https://www.dokeos.com/ Software Link: https://www.dokeos.com/ Version: 1.8.6.3 - 1.8.6.1...
Dokeos 2.2.1 - Blind SQL Injection
No description provided by source...
Dokeos 2.2.1 - Blind SQL Injection
Exploit for php platform in category web applications Exploit Title: Dokeos Blind SQL Injection Date: 2016-06-14 Exploit Author: Mormoroth Exploit Author Blog: http://ha.cker.ir Vendor Homepage: http://www.dokeos.com/ Software Link: http://jaist.dl.sourceforge.net/project/dokeos/dokeos-2.1.1.zip...
Dokeos 2.2.1 - Blind SQL Injection
Exploit Title: Dokeos Blind SQL Injection Date: 2016-06-14 Exploit Author: Mormoroth Exploit Author Blog: http://ha.cker.ir Vendor Homepage: http://www.dokeos.com/ Software Link: http://jaist.dl.sourceforge.net/project/dokeos/dokeos-2.1.1.zip Version: 2.2.1 Tested on: Ubuntu Twitter :...
Dokeos 2.2.1 - Blind SQL Injection
Dokeos 2.2.1 - Blind SQL Injection Exploit Title: Dokeos Blind SQL Injection Date: 2016-06-14 Exploit Author: Mormoroth Exploit Author Blog: http://ha.cker.ir Vendor Homepage: http://www.dokeos.com/ Software Link: http://jaist.dl.sourceforge.net/project/dokeos/dokeos-2.1.1.zip Version: 2.2.1 Test...
DOKEOS ce30 Authentication Bypass
Advisory ID: HTB23289 Product: DOKEOS Vendor: DOKEOS Vulnerable Versions: ce30 and probably prior Tested Version: ce30 Advisory Publication: January 7, 2016 without technical details Vendor Notification: January 7, 2016 Public Disclosure: February 17, 2016 Vulnerability Type: Improper...
DOKEOS SSO Authentication Bypass Vulnerability
Dokeos is an open source online education and course management system. A security vulnerability exists in DOKEOS. The vulnerability is caused by a variable type obfuscation error when comparing passwords to unserializable strings during authentication, SSO authentication is not possible...