Vulnerabilities

TI-2008-03224 CVE-2008-3363 · GHSA-7r38-qg56-j3jr

Directory traversal vulnerability in user_portal.php in the Dokeos E-Learning System…

LOW 39

Directory traversal vulnerability in user_portal.php in the Dokeos E-Learning System 1.8.5 on Windows allows remote attackers to include and execute arbitrary local files via a ..\ (dot dot backslash) in the include para…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03327 Published 2008-07-30 No fix listed CWE-22

TI-2008-00817 CVE-2008-0851 · GHSA-8mff-wqx9-7fr3

Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 allow remote…

LOW 27

Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter to inscription.php, (2) courseCode parameter to main/calend…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03964 Published 2008-02-21 No fix listed CWE-79

Vulnerabilities

Filters

Directory traversal vulnerability in user_portal.php in the Dokeos E-Learning System…

Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 allow remote…