GCVE - cpe:2.3:a:dokeos:dokeos:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:dokeos:dokeos:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Dokeos (`ae851068-a6d7-50b5-b67e-eb93df4db0a9`)
Product	Dokeos (`697fa974-82c1-5cd8-b09b-fca343554e5b`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:sourceforge/dokeos`	purl2cpe	2026-06-01 10:13:25.822432

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-2902`	vulnerable	2026-06-08 04:49:46.472728	Details available SQL injection vulnerability in main/auth/my_progress.php in Dokeos 1.8.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the course parameter. Published: 2007-05-30T10:00:00.000Z Updated: 2024-08-07T13:57:54.585Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/3974 http://osvdb.org/38145 http://www.vupen.com/english/advisories/2007/1934 https://exchange.xforce.ibmcloud.com/vulnerabilities/34468 http://www.securityfocus.com/bid/24125	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-2901`	vulnerable	2026-06-08 04:49:46.472352	Details available Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the img parameter to main/inc/lib/fckeditor/editor/plugins/ImageManager/editor.php and other unspecified vectors. Published: 2007-05-30T10:00:00.000Z Updated: 2024-08-07T13:57:54.662Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/3974 http://secunia.com/advisories/25397 http://www.vupen.com/english/advisories/2007/1934 http://osvdb.org/36521 https://exchange.xforce.ibmcloud.com/vulnerabilities/34733	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3924`	vulnerable	2026-06-08 04:49:10.533300	Details available Multiple cross-site scripting (XSS) vulnerabilities in Dokeos before 1.6.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Published: 2006-07-28T23:00:00.000Z Updated: 2024-08-07T18:48:39.438Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/19210 http://secunia.com/advisories/21239 http://www.osvdb.org/27586 http://www.dokeos.com/news.php#145	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-2286`	vulnerable	2026-06-08 04:49:06.233983	Details available Multiple PHP remote file inclusion vulnerabilities in claro_init_global.inc.php in Dokeos 1.6.3 and earlier, and Dokeos community release 2.0.3, allow remote attackers to execute arbitrary PHP code via a URL in the (1) rootSys and (2) clarolineRepositorySys parameters, and possibly the (3) lang_path, (4) extAuthSource, (5) thisAuthSource, (6) main_configuration_file_path, (7) phpDigIncCn, and (8) drs parameters to (a) testheaderpage.php and (b) resourcelinker.inc.php. Published: 2006-05-09T23:00:00.000Z Updated: 2024-08-07T17:43:29.271Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/1303 http://www.dokeos.com/forum/viewtopic.php?t=6848 https://exchange.xforce.ibmcloud.com/vulnerabilities/25740 http://secunia.com/advisories/19576 http://www.dokeos.com/wiki/index.php/Security	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-2598`	vulnerable	2026-06-08 04:48:29.771701	Details available Multiple directory traversal vulnerabilities in Dokeos 1.6 and earlier, and possibly Claroline, allow remote attackers to (1) delete arbitrary files or directories via the delete parameter to claroline/scorm/scormdocument.php, (2) move arbitrary files via the move_to and move_file parameters to claroline/document/document.php, or determine the existence of arbitrary files via the file parameter to (3) claroline/scorm/showinframes.php or (4) claroline/scorm/contents.php. Published: 2005-08-17T04:00:00.000Z Updated: 2024-08-07T22:30:01.752Z Open on db.gcve.eu Reference links http://lists.grok.org.uk/pipermail/full-disclosure/2005-August/036345.html http://secunia.com/advisories/16407 http://seclists.org/lists/fulldisclosure/2005/Aug/0394.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.