CVE:CVE-2009-2150
CNNVD:CNNVD-200906-346
Campus Virtual-LMS中存在多个跨站请求伪造漏洞。(1)远程攻击者可以借助login/logout.php，劫持请求中止会话的任意用户的权限，而且远程攻击者可以借助一个(2)ADD或(3)对enrolments/step2.php的DELETE操作，劫持某些用户的权限。
solution:Upgrade campusvirtualcomputrade campus_virtual-lms to a higher version than *