CourseMill Learning Management System CVE-2013-5706 Cross-Site Scripting Vulnerability
BID:73892
Info
CourseMill Learning Management System CVE-2013-5706 Cross-Site Scripting Vulnerability
| Bugtraq ID: | 73892 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-5706 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 06 2013 12:00AM |
| Updated: | Sep 06 2013 12:00AM |
| Credit: | Unknown |
| Vulnerable: |
Trivantis CourseMill Learning Management System 6.8 |
| Not Vulnerable: | |
Discussion
CourseMill Learning Management System CVE-2013-5706 Cross-Site Scripting Vulnerability
CourseMill Learning Management System is prone to a cross-site scripting vulnerability. Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow remote attackers to inject arbitrary web script or HTML via vectors related to error messages and (1) crafted event attributes or (2) > (greater than) characters that are optional within a browser s HTML implementation, a different issue than CVE-2013-3603.
CourseMill Learning Management System is prone to a cross-site scripting vulnerability. Multiple cross-site scripting (XSS) vulnerabilities in Coursemill Learning Management System (LMS) 6.8 allow remote attackers to inject arbitrary web script or HTML via vectors related to error messages and (1) crafted event attributes or (2) > (greater than) characters that are optional within a browser s HTML implementation, a different issue than CVE-2013-3603.
Solution / Fix
CourseMill Learning Management System CVE-2013-5706 Cross-Site Scripting Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or you are aware of more recent information, please mail us at: [email protected]