Cross site scripting

2009-09-0116:30:00

PRIOn knowledge base

www.prio-n.com

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

50.7%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in IntraLearn Software IntraLearn 2.1, and possibly other versions before 4.2.3, allow remote attackers to inject arbitrary web script or HTML via the (1) outline and (2) course parameters to library/description_link.cfm, or the (3) records_to_display and (4) the_start parameters to library/courses_catalog.cfm.

References

osvdb.org/42988

osvdb.org/42989

osvdb.org/ref/42/intralearn-21-multiple.txt