Dokeos <= 1.6.5 (courseLog.php scormcontopen) SQL Injection Exploit

No description provided by source...

Claroline 1.8 - &#039;/tracking/courseLog.php?view&#039; Cross-Site Scripting

source: https://www.securityfocus.com/bid/30346/info Claroline is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...

Sql injection

SQL injection vulnerability in tracking/courseLog.php in Dokeos 1.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the scormcontopen parameter...

CVE-2007-2889

CVE-2007-2889 corresponds to an SQL injection in tracking/courseLog.php of Dokeos (versions 1.6.5 and earlier). The underlying issue is that the scormcontopen parameter is unsafely used in SQL queries, enabling remote attackers to execute arbitrary SQL commands. Affected software: Dokeos 1.6.5 an...

Dokeos CourseLog.PHP SQL注入漏洞

Dokeos是一款基于PHP的WEB应用程序。 Dokeos不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息。 问题是'CourseLog.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL代码作为参数数据，可导致更改原来的SQL逻辑，获得敏感信息。 Dokeos Open Source Learning & Knowledge Management Tool 1.6.5 Dokeos Open Source Learning & Knowledge Management Tool 1.6.4 Dokeos Open Source Learnin...

Dokeos 1.6.5 - courseLog.php?scormcontopen SQL Injection

Dokeos 1.6.5 - courseLog.php?scormcontopen SQL Injection !/usr/bin/perl -w Dokeos = 1.6.5 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code courseLog.php: if $GET'scormcontopen'...

Dokeos <= 1.6.5 (courseLog.php scormcontopen) SQL Injection Exploit

Exploit for unknown platform in category web applications =================================================================== Dokeos = 1.6.5 courseLog.php scormcontopen SQL Injection Exploit =================================================================== !/usr/bin/perl -w Dokeos = 1.6.5 SQL...

Dokeos 1.6.5 - &#039;courseLog.php?scormcontopen&#039; SQL Injection

!/usr/bin/perl -w Dokeos = 1.6.5 SQL Injection Exploit Discovered by: Silentz Payload: Admin Username & Hash Retrieval Website: http://www.w4ck1ng.com Vulnerable Code courseLog.php: if $GET'scormcontopen' includeonceapigetlibrarypath.'/database.lib.php'; include'../scorm/XMLencode.php';...