Vulnerability index

Browse CVEs

14 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Dokeos MEDIUM 5.4
CVE-2012-5776

Dokeos 2.1.1 has multiple XSS issues involving "extra_" parameters in main/auth/profile.php.

No fix yet
Fix from $1,600 2020-01-29
Dokeos HIGH 7.5
CVE-2013-6341

SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the language parameter to ind…

Fix: after 2.2
Fix from $1,950 2013-12-05
Dokeos HIGH 7.5
CVE-2009-2004

Multiple SQL injection vulnerabilities in main/mySpace/myStudents.php in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitr…

Patch available
Fix from $1,950 2009-06-08
Dokeos MEDIUM 6.8
CVE-2009-2005

Cross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspec…

Patch available
Fix from $1,600 2009-06-08
Dokeos MEDIUM 6.8
CVE-2009-2008

Multiple SQL injection vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) uI…

Patch available
Fix from $1,600 2009-06-08
Dokeos MEDIUM 5.0
CVE-2009-2007

Multiple directory traversal vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to (1) read portions of arbitrary files vi…

Patch available
Fix from $1,600 2009-06-08
E Learning System HIGH 7.5
CVE-2008-3363

Directory traversal vulnerability in user_portal.php in the Dokeos E-Learning System 1.8.5 on Windows allows remote attackers to include and execute …

No fix yet
Fix from $1,950 2008-07-30
Open Source Learning And Knowledge Management Tool HIGH 7.5
CVE-2008-1223

Unspecified vulnerability in Dokeos 1.8.4 before SP3 allows attackers to execute arbitrary code via unspecified vectors.

Patch available
Fix from $1,950 2008-03-10
Dokeos HIGH 7.5
CVE-2008-0850

Multiple SQL injection vulnerabilities in Dokeos 1.8.4 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to whoisonli…

Mitigation only
Fix from $1,950 2008-02-21
Dokeos HIGH 7.5
CVE-2007-2902

SQL injection vulnerability in main/auth/my_progress.php in Dokeos 1.8.0 and earlier allows remote authenticated users to execute arbitrary SQL comma…

Fix: after 1.8.0
Fix from $1,950 2007-05-30
Open Source Learning And Knowledge Management Tool HIGH 7.5
CVE-2007-2889

SQL injection vulnerability in tracking/courseLog.php in Dokeos 1.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the s…

No fix yet
Fix from $1,950 2007-05-30
Dokeos MEDIUM 6.8
CVE-2006-2286

Multiple PHP remote file inclusion vulnerabilities in claro_init_global.inc.php in Dokeos 1.6.3 and earlier, and Dokeos community release 2.0.3, allo…

Fix: after 1.6.3
Fix from $1,600 2006-05-10
Open Source Learning And Knowledge Management Tool MEDIUM 5.1
CVE-2006-2285

PHP remote file inclusion vulnerability in authldap.php in Dokeos 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the includ…

Patch available
Fix from $1,600 2006-05-10
Dokeos MEDIUM 5.0
CVE-2005-2598

Multiple directory traversal vulnerabilities in Dokeos 1.6 and earlier, and possibly Claroline, allow remote attackers to (1) delete arbitrary files …

Fix: after 1.6
Fix from $1,600 2005-08-17