CVE-2009-2005 Cross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via...
MediumCVSS 6.8
EPSS 0.66%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dokeos | = 1.8.5 | No fix listed |
References
- holisticinfosec.org
- 34879 third-party-advisory vendor-advisory
- www.dokeos.com exploit patch
- 34928 vdb-entry
- ADV-2009-1300 patch vdb-entry vendor-advisory