CVE-2013-3599

userlogin.jsp in Coursemill Learning Management System LMS 6.6 and 6.8 allows remote attackers to gain privileges via a modified user-role value to home.html...

CVE-2013-3600

Coursemill Learning Management System LMS 6.6 allows remote authenticated users to gain privileges via a modified userid value to unspecified functions...

CVE-2013-3602

CVE-2013-3602 affects Coursemill Learning Management System (LMS) 6.6. The vulnerability is an SQL injection in admindocumentworker.jsp used to retrieve document data, where the docID parameter causes user-supplied SQL to be executed by the database. This vulnerability can be exploited by remote ...

CVE-2013-3603

Cross-site scripting XSS vulnerability in Coursemill Learning Management System LMS 6.6 allows remote attackers to inject arbitrary web script or HTML via vectors related to error messages...

CVE-2013-3604

CVE-2013-3604 concerns multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.6. The public descriptions in the provided documents state that remote attackers could inject arbitrary web script or HTML via crafted input. Connected records also referenc...

CVE-2013-3602

SQL injection vulnerability in admindocumentworker.jsp in Coursemill Learning Management System LMS 6.6 allows remote authenticated users to execute arbitrary SQL commands via the docID parameter...

CVE-2013-3605

CVE-2013-3605 concerns Cross-site request forgery (CSRF) in Coursemill Learning Management System (LMS) 6.6, enabling remote attackers to hijack the authentication of arbitrary users via cookies. The connected documents corroborate that the vulnerability involves cookie-related CSRF in the Course...

CVE-2013-3604

Multiple cross-site scripting XSS vulnerabilities in Coursemill Learning Management System LMS 6.6 allow remote attackers to inject arbitrary web script or HTML via crafted input...

CVE-2013-5707

Multiple cross-site scripting XSS vulnerabilities in Coursemill Learning Management System LMS 6.8 allow remote attackers to inject arbitrary web script or HTML via crafted input containing a %22 sequence, a different issue than CVE-2013-3604...

CVE-2013-5708

Coursemill Learning Management System LMS 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers to conduct cross-site request forgery CSRF attacks via vectors related to cookies, a different vulnerability than CVE-2013-3605...