263 matches found
Dokeos 1.x - forumviewthread.php?forum Cross-Site Scripting
Dokeos 1.x - forumviewthread.php?forum Cross-Site Scripting source: https://www.securityfocus.com/bid/26992/info Dokeos is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...
Dokeos 1.x - forumviewforum.php?forum Cross-Site Scripting
Dokeos 1.x - forumviewforum.php?forum Cross-Site Scripting source: https://www.securityfocus.com/bid/26992/info Dokeos is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...
Dokeos 1.x - '/work/work.php?display_upload_form Action origin' Cross-Site Scripting
source: https://www.securityfocus.com/bid/26992/info Dokeos is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
Dokeos 1.x - '/forum/viewthread.php?forum' Cross-Site Scripting
source: https://www.securityfocus.com/bid/26992/info Dokeos is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
Dokeos 1.x - workwork.php?display_upload_form Action origin Cross-Site Scripting
Dokeos 1.x - workwork.php?displayuploadform Action origin Cross-Site Scripting source: https://www.securityfocus.com/bid/26992/info Dokeos is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to...
Dokeos 1.x - '/forum/viewforum.php?forum' Cross-Site Scripting
source: https://www.securityfocus.com/bid/26992/info Dokeos is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the...
CVE-2007-6479
Unrestricted file upload vulnerability in the "My productions" component for main/auth/profile.php aka the "My profile" page in Dokeos 1.8.4 allows remote authenticated users to upload and execute arbitrary PHP files via a filename with a double extension, which can then be accessed through a URI...
Unrestricted file upload
Unrestricted file upload vulnerability in the "My productions" component for main/auth/profile.php aka the "My profile" page in Dokeos 1.8.4 allows remote authenticated users to upload and execute arbitrary PHP files via a filename with a double extension, which can then be accessed through a URI...
CVE-2007-6479
Unrestricted file upload vulnerability in the "My productions" component for main/auth/profile.php aka the "My profile" page in Dokeos 1.8.4 allows remote authenticated users to upload and execute arbitrary PHP files via a filename with a double extension, which can then be accessed through a URI...
CVE-2007-6479
In Dokeos 1.8.4, the component My productions (main/auth/profile.php) has an unrestricted file upload flaw. Remote authenticated users can upload and execute arbitrary PHP files by using a filename with a double extension, accessible under main/upload/users/ .
CVE-2007-6479
Unrestricted file upload vulnerability in the "My productions" component for main/auth/profile.php aka the "My profile" page in Dokeos 1.8.4 allows remote authenticated users to upload and execute arbitrary PHP files via a filename with a double extension, which can then be accessed through a URI...
Dokeos 1.8.4 Bypass Upload Shell From Your Profile Vulnerability
No description provided by source. Name : dokeos-1.8.4 Bypass Upload Shell From Your Profile Your Cpanel Download From : http://www.dokeos.com/download/dokeos-1.8.4.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Platform Dokeos 1.8.4 漏 2007...
Dokeos 1.8.4 Bypass Upload Shell From Your Profile Vulnerability
No description provided by source. Name : dokeos-1.8.4 Bypass Upload Shell From Your Profile Your Cpanel Download From : http://www.dokeos.com/download/dokeos-1.8.4.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Platform Dokeos 1.8.4 2007...
Dokeos 1.8.4 - Arbitrary File Upload
Dokeos 1.8.4 - Arbitrary File Upload Name : dokeos-1.8.4 Bypass Upload Shell From Your Profile Your Cpanel Download From : http://www.dokeos.com/download/dokeos-1.8.4.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Platform Dokeos 1.8.4 © 2007...
Dokeos 1.8.4 Bypass Upload Shell From Your Profile Vulnerability
Exploit for unknown platform in category web applications ================================================================ Dokeos 1.8.4 Bypass Upload Shell From Your Profile Vulnerability ================================================================ Name : dokeos-1.8.4 Bypass Upload Shell From...
Dokeos 1.8.4 - Arbitrary File Upload
Name : dokeos-1.8.4 Bypass Upload Shell From Your Profile Your Cpanel Download From : http://www.dokeos.com/download/dokeos-1.8.4.zip Found By : RoMaNcYxHaCkEr Home Page : Not Yet : Google Dork : Platform Dokeos 1.8.4 © 2007...
Sql injection
SQL injection vulnerability in main/auth/myprogress.php in Dokeos 1.8.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the course parameter...
CVE-2007-2902
SQL injection vulnerability in main/auth/myprogress.php in Dokeos 1.8.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the course parameter...
CVE-2007-2901
Multiple cross-site scripting XSS vulnerabilities in Dokeos 1.8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the img parameter to main/inc/lib/fckeditor/editor/plugins/ImageManager/editor.php and other unspecified vectors...