CVE-2007-2889

Published: May 30, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in tracking/courseLog.php in Dokeos 1.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the scormcontopen parameter.

Affected (9)

Products: Dokeos: Open Source Learning And Knowledge Management Tool

Dokeos

1 product

Open Source Learning And Knowledge Management Tool

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.4
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.5.3
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.5.4
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.5.5
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.5
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.6.4
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.6.4_p1
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.6.5
Dokeos Open Source Learning And Knowledge Management Tool	Version 1.6_rc2