CVE-2008-1223

概要

参考情報

• projects.dokeos.com/index.php
• secunia.com/advisories/29254 · Vendor Advisory
• dokeos.com/wiki/index.php/Security · Patch
• securityfocus.com/bid/28121
• vupen.com/english/advisories/2008/0798
• exchange.xforce.ibmcloud.com/vulnerabilities/41048

open source learning and knowledge management tool のその他の脆弱性

• CVE-2008-1222中 4.3Cross-site scripting (XSS) vulnerability in Dokeos 1.8.4 before SP3 allows remote attackers to inject arbitrary web script or HTML via unspe…
• CVE-2007-6574中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 and earlier allow remote attackers to inject arbitrary web script or HTM…
• CVE-2007-2889高 7.5SQL injection vulnerability in tracking/courseLog.php in Dokeos 1.6.5 and earlier allows remote attackers to execute arbitrary SQL commands …
• CVE-2006-4844中 5.1PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other…
• CVE-2006-2285中 5.1PHP remote file inclusion vulnerability in authldap.php in Dokeos 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in t…