Dokeos CVEs and Security Vulnerabilities

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2006-3924

Multiple cross-site scripting (XSS) vulnerabilities in Dokeos before 1.6.5 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.

CVSS 2.0 · 4.3 Medium EPSS 1.2% KEV · Not listed

Vendors

Dokeos

Products

Dokeos

CVE-2006-4844

PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other products, allows remote attackers to execute arbitrary PHP code via a URL in the extAuthSource[newUser] parameter.

CVSS 2.0 · 5.1 Medium EPSS 10.6% KEV · Not listed

Vendors

Claroline Dokeos

Products

Claroline Open Source Learning And Knowledge Management Tool

CVE-2013-6341

SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the language parameter to index.php.

CVSS 2.0 · 7.5 High EPSS 2.3% KEV · Not listed

Vendors

Dokeos

Products

Dokeos

CVE-2012-5776

Dokeos 2.1.1 has multiple XSS issues involving "extra_" parameters in main/auth/profile.php.

CVSS 3.1 · 5.4 Medium EPSS < 1% KEV · Not listed

Vendors

Dokeos

Products

Dokeos

« first previous Page 2 of 2.