6 matches found
CVE-2006-2285
CVE-2006-2285 affects Dokeos 1.6.4, exposing a PHP remote file inclusion in authldap.php. An attacker can supply a URL in the includePath parameter to cause arbitrary PHP code execution. The issue is documented across multiple sources (NVD/NIST, CVE records) with a CVSS v2 base score of 5.1 (Medi...
CVE-2008-1222
CVE-2008-1222 is an XSS in Dokeos 1.8.4 before SP3. Remote attackers can inject arbitrary script/HTML via unspecified vectors. The connected sources confirm the affected product and vulnerability type; no detailed root cause, exact vectors, or patch specifics are provided in the documents. No exp...
CVE-2008-1223
CVE-2008-1223 affects Dokeos 1.8.4 before SP3. The vulnerability is described as an unspecified vulnerability allowing arbitrary code execution via unspecified vectors. Connected sources do not provide concrete technical details (no exposed root cause, affected component, or patch/version fixes b...
CVE-2007-6574
CVE-2007-6574 affects Dokeos 1.8.4 and earlier. It enables cross-site scripting via the origin parameter to work/work.php (display_upload_form action) and via the forum parameter to forum/viewforum.php or forum/viewthread.php. No remediation details are provided in the connected documents; impact...
CVE-2007-2889
CVE-2007-2889 corresponds to an SQL injection in tracking/courseLog.php of Dokeos (versions 1.6.5 and earlier). The underlying issue is that the scormcontopen parameter is unsafely used in SQL queries, enabling remote attackers to execute arbitrary SQL commands. Affected software: Dokeos 1.6.5 an...