Directory traversal vulnerability in user_portal.php in the Dokeos E-Learning System 1.8.5 on Windows allows remote attackers to include and execute arbitrary local files via a ..\ (dot dot backslash) in the include parameter.
| Software | From | Fixed in |
|---|---|---|
| dokeos / e-learning_system | 1.8.5 | 1.8.5.x |