CVE-2009-2009

CVE-2009-2009 affects Dokeos 1.8.5 (and possibly earlier). The vulnerability involves multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via two parameters: (1) curdirpath in main/document/slideshow.php and (2) file in main/exerc...