Approved changes feed: RSS · Atom

cpe:2.3:a:dokeos:dokeos_community_release:2.0.3:*:*:*:*:*:*:*

part: a version: 2.0.3 update: *

VendorDokeos (ae851068-a6d7-50b5-b67e-eb93df4db0a9)
ProductDokeos Community Release (2f252c26-6df7-523d-8eb7-d9bdbb746d0e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/armank17/dokeos-community purl2cpe 2026-06-01 10:13:25.820878
pkg:sourceforge/dokeos purl2cpe 2026-06-01 10:13:25.820881

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-2286 vulnerable 2026-06-08 04:49:06.234721 Details available
Multiple PHP remote file inclusion vulnerabilities in claro_init_global.inc.php in Dokeos 1.6.3 and earlier, and Dokeos community release 2.0.3, allow remote attackers to execute arbitrary PHP code via a URL in the (1) rootSys and (2) clarolineRepositorySys parameters, and possibly the (3) lang_path, (4) extAuthSource, (5) thisAuthSource, (6) main_configuration_file_path, (7) phpDigIncCn, and (8) drs parameters to (a) testheaderpage.php and (b) resourcelinker.inc.php.
Published: 2006-05-09T23:00:00.000Z
Updated: 2024-08-07T17:43:29.271Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.