Approved changes feed: RSS · Atom

cpe:2.3:a:dokeos:open_source_learning_and_knowledge_management_tool:1.5.3:*:*:*:*:*:*:*

part: a version: 1.5.3 update: *

VendorDokeos (ae851068-a6d7-50b5-b67e-eb93df4db0a9)
ProductOpen Source Learning And Knowledge Management Tool (5c567793-962f-5aea-af83-e9c68a9cf7c3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-6574 vulnerable 2026-06-08 04:50:09.133793 Details available
Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the origin parameter to work/work.php in a display_upload_form action, or the forum parameter to (2) forum/viewforum.php or (3) forum/viewthread.php.
Published: 2007-12-28T21:00:00.000Z
Updated: 2024-08-07T16:11:05.972Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2889 vulnerable 2026-06-08 04:49:46.452529 Details available
SQL injection vulnerability in tracking/courseLog.php in Dokeos 1.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the scormcontopen parameter.
Published: 2007-05-30T01:00:00.000Z
Updated: 2024-08-07T13:57:54.939Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-4844 vulnerable 2026-06-08 04:49:18.996208 Details available
PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the extAuthSource[newUser] parameter.
Published: 2006-09-19T01:00:00.000Z
Updated: 2024-08-07T19:23:41.218Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2285 vulnerable 2026-06-08 04:49:06.230465 Details available
PHP remote file inclusion vulnerability in authldap.php in Dokeos 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter.
Published: 2006-05-09T23:00:00.000Z
Updated: 2024-08-07T17:43:28.963Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.