CVE-2007-6574

Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.4 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the origin parameter to work/work.php in a display_upload_form action, or the forum parameter to (2) forum/viewforum.php or (3) forum/viewthread.php.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.76% chance of exploitation in the next 30 days, 76th percentile

Published

2007-12-28

Updated

2024-08-07

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/30926
• https://www.exploit-db.com/exploits/30925
• https://www.exploit-db.com/exploits/30924

References

• CVE Record
• NVD entry

Related

• CVE-2007-6568
• CVE-2007-6575
• CVE-2007-6567
• CVE-2007-6576
• CVE-2007-6566
• CVE-2007-6577