CVE-2007-6574

CVE-2007-6574 affects Dokeos 1.8.4 and earlier. It enables cross-site scripting via the origin parameter to work/work.php (display_upload_form action) and via the forum parameter to forum/viewforum.php or forum/viewthread.php. No remediation details are provided in the connected documents; impact...