Description
Cross-site request forgery (CSRF) vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors.
References
- ADV-2009-1300 vdb-entry
- 34879 third-party-advisory
- http://www.dokeos.com/wiki/index.php/Security#Dokeos_1.8
- http://holisticinfosec.org/content/view/112/45/
- 34928 vdb-entry