VendorsDokeosopen_source_learning_and_knowledge_management_tool1.6_rc2
Vulnerabilities

Dokeos Open Source Learning And Knowledge Management Tool 1.6_rc2

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2007-2889
SQL injection vulnerability in tracking/courseLog.php in Dokeos 1.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the scormcontopen parameter.
Published 2007-05-30 · Modified
7.51 PoCEPSS 0.022
CVE-2006-4844
PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the extAuthSource[newUser] parameter.
Published 2006-09-19 · Modified
5.11 PoCEPSS 0.104
CVE-2006-2285
PHP remote file inclusion vulnerability in authldap.php in Dokeos 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter.
Published 2006-05-09 · Modified
5.11 PoCEPSS 0.041