← Database

CVE-2007-2889

HIGH CVSS: 7.5 Published: 2007-05-30 Modified: 2026-06-16

Description

SQL injection vulnerability in tracking/courseLog.php in Dokeos 1.6.5 and earlier allows remote attackers to execute arbitrary SQL commands via the scormcontopen parameter.

Affected Platforms

Dokeos Open Source Learning And Knowledge Management Tool

Weakness Type

NVD-CWE-Other

References