CVE-2009-2009

Mô tả

Tham khảo

• gsasec.blogspot.com/2009/05/dokeos-free-185-multiple.html
• dokeos.com/wiki/index.php/Security · Patch
• securityfocus.com/bid/34928
• vupen.com/english/advisories/2009/1300 · Patch
• exchange.xforce.ibmcloud.com/vulnerabilities/51140

Lỗ hổng khác của dokeos

• CVE-2012-5776TRUNG BÌNH 5.4Dokeos 2.1.1 has multiple XSS issues involving "extra_" parameters in main/auth/profile.php.
• CVE-2013-6341CAO 7.5SQL injection vulnerability in Dokeos 2.2 RC2 and earlier allows remote attackers to execute arbitrary SQL commands via the language paramet…
• CVE-2009-2008TRUNG BÌNH 6.8Multiple SQL injection vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to execute arbitrary SQL commands via t…
• CVE-2009-2007TRUNG BÌNH 5.0Multiple directory traversal vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to (1) read portions of arbitrary…
• CVE-2009-2006THẤP 2.6Multiple cross-site scripting (XSS) vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web sc…