CVE-2006-2285

Published: May 10, 2006Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

PHP remote file inclusion vulnerability in authldap.php in Dokeos 1.6.4 allows remote attackers to execute arbitrary PHP code via a URL in the includePath parameter.

Affected (7)

Products: Dokeos: Open Source Learning And Knowledge Management Tool

1 product

Open Source Learning And Knowledge Management Tool

Configuration A

7 vulnerable

Vulnerable Software	Affected Versions
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.4
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.5.3
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.5.4
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.5.5
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.5
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.6.4
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.6_rc2

References (18)

http://secunia.com/advisories/19980

Source: cve@mitre.org

PatchVendor Advisory

http://securityreason.com/securityalert/856

Source: cve@mitre.org

http://securitytracker.com/id?1016089

Source: cve@mitre.org

http://www.osvdb.org/25437

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/433247/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/17873

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/17915

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2006/1680

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26274

Source: cve@mitre.org

http://secunia.com/advisories/19980

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://securityreason.com/securityalert/856

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1016089

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/25437

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/433247/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/17873

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/bid/17915

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/1680

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/26274

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.