Coursemill Learning Management System Security Vulnerabilities and Issues — Coursemill Learning Management System CVE List

Lucene search

TrivantisCoursemill Learning Management System

3 matches found

CVE•added 2013/09/06 11:15 a.m.•36 views

CVE-2013-3601

Coursemill Learning Management System (LMS) 6.6 does not properly restrict JSP function calls, which allows remote authenticated users to perform arbitrary JSP operations by leveraging the Student role and providing an op parameter.

6CVSS6.6AI score0.00277EPSS

CVE•added 2013/09/06 11:15 a.m.•34 views

CVE-2013-3605

Cross-site request forgery (CSRF) vulnerability in Coursemill Learning Management System (LMS) 6.6 allows remote attackers to hijack the authentication of arbitrary users via vectors related to cookies.

6.8CVSS7.2AI score0.00074EPSS

CVE•added 2013/09/06 11:15 a.m.•25 views

CVE-2013-5708

Coursemill Learning Management System (LMS) 6.8 constructs secret tokens based on time values, which makes it easier for remote attackers to conduct cross-site request forgery (CSRF) attacks via vectors related to cookies, a different vulnerability than CVE-2013-3605.

6.8CVSS6.8AI score0.00148EPSS