Cross Site Scripting vulnerability in Chamilo LMS v.1.11.26 allows a remote attacker to escalate privileges via a crafted script to the filename parameter of the home.php component...
4.6CVSS6.7AI score0.00383EPSS
SaveExploits2References1
Cvelist•added 2009/09/24 4:0 p.m.•29 views
CVE-2009-3348
Cross-site scripting XSS vulnerability in Datavore Gyro 5.0 allows remote attackers to inject arbitrary web script or HTML via the cid parameter in a cat action to the home component...