CVE-2007-2902

SQL injection vulnerability in main/auth/my_progress.php in Dokeos 1.8.0 and earlier allows remote authenticated users to execute arbitrary SQL commands via the course parameter.

Date published : 2007-05-30

http://www.securityfocus.com/bid/24125

https://www.exploit-db.com/exploits/3974