CVE-2013-3600

Coursemill Learning Management System LMS 6.6 allows remote authenticated users to gain privileges via a modified userid value to unspecified functions...

CVE-2013-3600

The CVE-2013-3600 issue affects Coursemill Learning Management System (LMS) 6.6. Affected component: the userid parameter used in certain functions (e.g., via Edit Profile); root cause is external control of an assumed-immutable web parameter, enabling privilege escalation when authenticated as a...