Trivantis Coursemill Learning Management System

10 CVEs affecting Trivantis Coursemill Learning Management System. Latest disclosed: 2013-09-06. Critical: 0, High: 0.

Top CVEs affecting Trivantis Coursemill Learning Management System
CVESeverityScorePublishedSummary
CVE-2013-57082013-09-06Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers to conduct cross-site…
CVE-2013-57072013-09-06Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow remote attackers to inject arbitrary web script or…
CVE-2013-57062013-09-06Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow remote attackers to inject arbitrary web script or…
CVE-2013-36052013-09-06Cross-site request forgery (CSRF) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remote attackers to hijack the authentication of arbi…
CVE-2013-36042013-09-06Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.6 allow remote attackers to inject arbitrary web script or…
CVE-2013-36032013-09-06Cross-site scripting (XSS) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remote attackers to inject arbitrary web script or HTML via…
CVE-2013-36022013-09-06SQL injection vulnerability in admindocumentworker.jsp in Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users to execute arbitrar…
CVE-2013-36012013-09-06Coursemill Learning Management System (LMS) 6.6 does not properly restrict JSP function calls, which allows remote authenticated users to perform arbitrary JSP…
CVE-2013-36002013-09-06Coursemill Learning Management System (LMS) 6.6 allows remote authenticated users to gain privileges via a modified userid value to unspecified functions.
CVE-2013-35992013-09-06userlogin.jsp in Coursemill Learning Management System (LMS) 6.6 and 6.8 allows remote attackers to gain privileges via a modified user-role value to home.html.