CVE-2009-2004

概要

参考情報

• holisticinfosec.org/content/view/112/45
• secunia.com/advisories/34879 · Vendor Advisory
• dokeos.com/wiki/index.php/Security · Patch
• securityfocus.com/bid/34928
• vupen.com/english/advisories/2009/1300 · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/50501

dokeos のその他の脆弱性

• CVE-2012-5776中 5.4Dokeos 2.1.1 has multiple XSS issues involving "extra_" parameters in main/auth/profile.php.
• CVE-2013-6341高 7.5SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the language paramet…
• CVE-2009-2009中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web sc…
• CVE-2009-2008中 6.8Multiple SQL injection vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via t…
• CVE-2009-2007中 5.0Multiple directory traversal vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to (1) read portions of arbitrary…