CVE-2007-2902

EPSS 1.1%

SQL injection vulnerability in main/auth/my_progress.php in Dokeos 1.8.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the course parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/3974unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/38145 https://exchange.xforce.ibmcloud.com/vulnerabilities/34468 https://www.exploit-db.com/exploits/3974 http://www.securityfocus.com/bid/24125 http://www.vupen.com/english/advisories/2007/1934