Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Dokeos 1.6.4 SQL Injection Vulnerability
From: "Alvaro Olavarria" <aolavarria () secure cl>
Date: Mon, 10 Apr 2006 21:47:00 -0400 (CLT)

Dokeos 1.6.4 SQL Injection Vulnerability

Author: Alvaro Olavarria <aolavarria () secure cl>

Affected: Dokeos <= 1.6.4
Status: Notified hereby
Vendor url: http://www.dokeos.com


Dokeos is an Open Source elearning and course management web application
translated in 34 languages
and helping more than 1.000 organisations worldwide to manage learning and
collaboration activities.


Dokeos was built using Claroline's code; it inherited several of its
features including an old version
 of phpBB which is being used as the forum for the courses.   There is a
problem  in the “viewtopic.php",
 where the $topic variable is not correctly sanitized and $forumview is
equal to “threaded", that would
allow an attacker to inject arbitrary code to the application.


An attacker could use Blind SQL Injection to gain access to privileged
data like the password hashes
for the administrator user and so on.

Proof of Concept



Rodrigo Guitierrez <rodrigo () secure cl>
University of Los Lagos in Chile "for lending the required equipment for
testing" >:D

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
  • Dokeos 1.6.4 SQL Injection Vulnerability Alvaro Olavarria (Apr 11)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]