CVE-2013-6341

CVE-2013-6341 : Dokeos up to 2.2 RC2 has a SQL injection via the GET parameter “language” sent to /index.php. Root cause: insufficient validation of the language parameter. Impact: remote attacker can execute arbitrary SQL commands against the application database (high risk). Affected: Dokeos 2....