CVE-2006-3924

概要

参考情報

• secunia.com/advisories/21239 · Vendor Advisory
• dokeos.com/news.php
• osvdb.org/27586
• securityfocus.com/bid/19210 · Patch

dokeos のその他の脆弱性

• CVE-2012-5776中 5.4Dokeos 2.1.1 has multiple XSS issues involving "extra_" parameters in main/auth/profile.php.
• CVE-2013-6341高 7.5SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the language paramet…
• CVE-2009-2009中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web sc…
• CVE-2009-2008中 6.8Multiple SQL injection vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via t…
• CVE-2009-2007中 5.0Multiple directory traversal vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to (1) read portions of arbitrary…