← Database

CVE-2009-2005

MEDIUM CVSS: 6.8 Published: 2009-06-08 Modified: 2026-06-16

Description

Cross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors.

Affected Platforms

Dokeos Dokeos

Weakness Type

CWE-352

References