CVEvulnerability
CVE-2009-2005
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-06-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors.
Affected configurations
• dokeos dokeos 1.8.5
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://holisticinfosec.org/content/view/112/45/ holisticinfosec.org
- http://secunia.com/advisories/34879 Vendor Advisory
- http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8 Exploit, Patch
- http://www.securityfocus.com/bid/34928 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1300 Patch, Vendor Advisory
- http://holisticinfosec.org/content/view/112/45/ holisticinfosec.org
- http://secunia.com/advisories/34879 Vendor Advisory
- http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8 Exploit, Patch
- http://www.securityfocus.com/bid/34928 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/1300 Patch, Vendor Advisory