CVE-2009-2005

Mô tả

Tham khảo

• holisticinfosec.org/content/view/112/45
• secunia.com/advisories/34879 · Vendor Advisory
• dokeos.com/wiki/index.php/Security · Exploit
• securityfocus.com/bid/34928
• vupen.com/english/advisories/2009/1300 · Patch

Lỗ hổng khác của dokeos

• CVE-2012-5776TRUNG BÌNH 5.4Dokeos 2.1.1 has multiple XSS issues involving "extra_" parameters in main/auth/profile.php.
• CVE-2013-6341CAO 7.5SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the language paramet…
• CVE-2009-2009TRUNG BÌNH 4.3Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web sc…
• CVE-2009-2008TRUNG BÌNH 6.8Multiple SQL injection vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via t…
• CVE-2009-2007TRUNG BÌNH 5.0Multiple directory traversal vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to (1) read portions of arbitrary…