CVE-2009-2009

概要

参考情報

• gsasec.blogspot.com/2009/05/dokeos-free-185-multiple.html
• dokeos.com/wiki/index.php/Security · Patch
• securityfocus.com/bid/34928
• vupen.com/english/advisories/2009/1300 · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/51140

dokeos のその他の脆弱性

• CVE-2012-5776中 5.4Dokeos 2.1.1 has multiple XSS issues involving "extra_" parameters in main/auth/profile.php.
• CVE-2013-6341高 7.5SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the language paramet…
• CVE-2009-2008中 6.8Multiple SQL injection vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via t…
• CVE-2009-2007中 5.0Multiple directory traversal vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to (1) read portions of arbitrary…
• CVE-2009-2006低 2.6Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web sc…