CVE-2009-2005 | BDVDB-2026-36890 Detail

Description#

Cross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.vupen.com/english/advisories/2009/1300
http://secunia.com/advisories/34879
http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8
http://holisticinfosec.org/content/view/112/45/
http://www.securityfocus.com/bid/34928

Exploit#

No public exploit known

History#

Version 12009-06-08Record published in the CVE List.
Version 22024-09-16Most recent update recorded in the CVE List.