Browse CVEs

MEDIUM 5.4 CVE-2012-5776 Dokeos 2.1.1 has multiple XSS issues involving "extra_" parameters in main/auth/profile.php. Dokeos No fix yet Fix from $1,6002020-01-29 HIGH 7.5 CVE-2013-6341 SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the language parameter to ind… Dokeos after 2.2 Fix from $1,9502013-12-05 HIGH 7.5 CVE-2009-2004 Multiple SQL injection vulnerabilities in main/mySpace/myStudents.php in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitr… Dokeos Patch available Fix from $1,9502009-06-08 MEDIUM 6.8 CVE-2009-2005 Cross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspec… Dokeos Patch available Fix from $1,6002009-06-08 MEDIUM 6.8 CVE-2009-2008 Multiple SQL injection vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via the (1) uI… Dokeos Patch available Fix from $1,6002009-06-08 MEDIUM 5.0 CVE-2009-2007 Multiple directory traversal vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to (1) read portions of arbitrary files vi… Dokeos Patch available Fix from $1,6002009-06-08 HIGH 7.5 CVE-2008-3363 Directory traversal vulnerability in user_portal.php in the Dokeos E-Learning System 1.8.5 on Windows allows remote attackers to include and execute … E Learning System No fix yet Fix from $1,9502008-07-30 HIGH 7.5 CVE-2008-1223 Unspecified vulnerability in Dokeos 1.8.4 before SP3 allows attackers to execute arbitrary code via unspecified vectors. Open Source Learning And Knowledge Management Tool Patch available Fix from $1,9502008-03-10 HIGH 7.5 CVE-2008-0850 Multiple SQL injection vulnerabilities in Dokeos 1.8.4 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to whoisonli… Dokeos Mitigation only Fix from $1,9502008-02-21 HIGH 7.5 CVE-2007-2902 SQL injection vulnerability in main/auth/my_progress.php in Dokeos 1.8.0 and earlier allows remote authenticated users to execute arbitrary SQL comma… Dokeos after 1.8.0 Fix from $1,9502007-05-30 HIGH 7.5 CVE-2007-2889 SQL injection vulnerability in tracking/courseLog.php in Dokeos 1.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the s… Open Source Learning And Knowledge Management Tool No fix yet Fix from $1,9502007-05-30 MEDIUM 6.8 CVE-2006-2286 Multiple PHP remote file inclusion vulnerabilities in claro_init_global.inc.php in Dokeos 1.6.3 and earlier, and Dokeos community release 2.0.3, allo… Dokeos after 1.6.3 Fix from $1,6002006-05-10 MEDIUM 5.1 CVE-2006-2285 PHP remote file inclusion vulnerability in authldap.php in Dokeos 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the includ… Open Source Learning And Knowledge Management Tool Patch available Fix from $1,6002006-05-10 MEDIUM 5.0 CVE-2005-2598 Multiple directory traversal vulnerabilities in Dokeos 1.6 and earlier, and possibly Claroline, allow remote attackers to (1) delete arbitrary files … Dokeos after 1.6 Fix from $1,6002005-08-17