Skip to content
Noroxi

dokeos records

24 published records for vendor dokeos.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
12
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

24 records
  • CVE-2008-3363
    31Monitor

    Directory traversal vulnerability in user_portal.php in the Dokeos E-Learning System 1.8.5 on Windows allows remote attackers to include and

    HighCVSS 7.5Proof of conceptEPSS 3%

    dokeos · e-learning systemJul 30, 2008

  • CVE-2008-0850
    31Monitor

    Multiple SQL injection vulnerabilities in Dokeos 1.8.4 allow remote attackers to execute arbitrary SQL commands via the (1) id parameter to

    HighCVSS 7.5Proof of conceptEPSS 2%

    dokeos · dokeosFeb 20, 2008

  • CVE-2013-6341
    31Monitor

    SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the language paramet

    HighCVSS 7.5Proof of conceptEPSS 2%

    dokeos · dokeosDec 5, 2013

  • CVE-2008-1223
    31Monitor

    Unspecified vulnerability in Dokeos 1.8.4 before SP3 allows attackers to execute arbitrary code via unspecified vectors.

    HighCVSS 7.5No exploitEPSS 2%

    dokeos · open source learning and knowledge management toolMar 10, 2008

  • CVE-2007-2889
    31Monitor

    SQL injection vulnerability in tracking/courseLog.php in Dokeos 1.6.5 and earlier allows remote attackers to execute arbitrary SQL commands

    HighCVSS 7.5Proof of conceptEPSS 2%

    dokeos · open source learning and knowledge management toolMay 29, 2007

  • CVE-2009-2004
    30Monitor

    Multiple SQL injection vulnerabilities in main/mySpace/myStudents.php in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execu

    HighCVSS 7.5No exploitEPSS 1%

    dokeos · dokeosJun 8, 2009

  • CVE-2007-2902
    30Monitor

    SQL injection vulnerability in main/auth/my_progress.php in Dokeos 1.8.0 and earlier allows remote authenticated users to execute arbitrary

    HighCVSS 7.5Proof of conceptEPSS 1%

    dokeos · dokeosMay 30, 2007

  • CVE-2006-2284
    29Monitor

    Multiple PHP remote file inclusion vulnerabilities in Claroline 1.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the

    MediumCVSS 6.8Proof of conceptEPSS 6%

    claroline · clarolineMay 9, 2006

  • CVE-2006-2286
    27Monitor

    Multiple PHP remote file inclusion vulnerabilities in claro_init_global.inc.php in Dokeos 1.6.3 and earlier, and Dokeos community release 2.

    MediumCVSS 6.8No exploitEPSS 1%

    dokeos · dokeosMay 9, 2006

  • CVE-2009-2008
    27Monitor

    Multiple SQL injection vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via t

    MediumCVSS 6.8No exploitEPSS 1%

    dokeos · dokeosJun 8, 2009

  • CVE-2009-2005
    27Monitor

    Cross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication

    MediumCVSS 6.8No exploitEPSS 0%

    dokeos · dokeosJun 8, 2009

  • CVE-2006-4844
    23Monitor

    PHP remote file inclusion vulnerability in inc/claro_init_local.inc.php in Claroline 1.7.7 and earlier, as used in Dokeos and possibly other

    MediumCVSS 5.1Proof of conceptEPSS 10%

    claroline · clarolineSep 18, 2006

  • CVE-2006-2285
    21Monitor

    PHP remote file inclusion vulnerability in authldap.php in Dokeos 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in t

    MediumCVSS 5.1Proof of conceptEPSS 4%

    dokeos · open source learning and knowledge management toolMay 9, 2006

  • CVE-2009-2007
    21Monitor

    Multiple directory traversal vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to (1) read portions of arbitrary

    MediumCVSS 5.0No exploitEPSS 1%

    dokeos · dokeosJun 8, 2009

  • CVE-2012-5776
    21Monitor

    Dokeos 2.1.1 has multiple XSS issues involving "extra_" parameters in main/auth/profile.php.

    MediumCVSS 5.4No exploitEPSS 0%

    dokeos · dokeosJan 29, 2020

  • CVE-2005-2598
    20Monitor

    Multiple directory traversal vulnerabilities in Dokeos 1.6 and earlier, and possibly Claroline, allow remote attackers to (1) delete arbitra

    MediumCVSS 5.0No exploitEPSS 1%

    dokeos · dokeosAug 17, 2005

  • CVE-2007-6479
    19Monitor

    Unrestricted file upload vulnerability in the "My productions" component for main/auth/profile.php (aka the "My profile" page) in Dokeos 1.8

    MediumCVSS 4.9Proof of conceptEPSS 1%

    dokeos · dokeosDec 20, 2007

  • CVE-2008-0851
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 allow remote attackers to inject arbitrary web script or HTML via the (1

    MediumCVSS 4.3Proof of conceptEPSS 3%

    dokeos · e-learning systemFeb 20, 2008

  • CVE-2007-2901
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.0 and earlier allow remote attackers to inject arbitrary web script or HTM

    MediumCVSS 4.3Proof of conceptEPSS 1%

    dokeos · dokeosMay 30, 2007

  • CVE-2007-6574
    18Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 and earlier allow remote attackers to inject arbitrary web script or HTM

    MediumCVSS 4.3Proof of conceptEPSS 1%

    dokeos · open source learning and knowledge managementDec 28, 2007

  • CVE-2008-1222
    17Monitor

    Cross-site scripting (XSS) vulnerability in Dokeos 1.8.4 before SP3 allows remote attackers to inject arbitrary web script or HTML via unspe

    MediumCVSS 4.3No exploitEPSS 1%

    dokeos · open source learning and knowledge management toolMar 10, 2008

  • CVE-2006-3924
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Dokeos before 1.6.5 allow remote attackers to inject arbitrary web script or HTML via

    MediumCVSS 4.3No exploitEPSS 1%

    dokeos · dokeosJul 28, 2006

  • CVE-2009-2009
    17Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web sc

    MediumCVSS 4.3No exploitEPSS 1%

    dokeos · dokeosJun 8, 2009

  • CVE-2009-2006
    10Monitor

    Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web sc

    LowCVSS 2.6No exploitEPSS 1%

    dokeos · dokeosJun 8, 2009