CVE-2009-2005

Impact

Cross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://holisticinfosec.org/content/view/112/45/
• http://secunia.com/advisories/34879
• http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8
• http://www.securityfocus.com/bid/34928
• http://www.vupen.com/english/advisories/2009/1300
• http://holisticinfosec.org/content/view/112/45/
• http://secunia.com/advisories/34879
• http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8
• http://www.securityfocus.com/bid/34928
• http://www.vupen.com/english/advisories/2009/1300