Vulnerability Details CVE-2009-3513
Multiple cross-site scripting (XSS) vulnerabilities in Pilot Group (PG) eTraining allow remote attackers to inject arbitrary web script or HTML via (1) the cat_id parameter to courses_login.php, the id parameter to (2) news_read.php or (3) lessons_login.php, or (4) the cur parameter in a start action to lessons_login.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 54.1%
CVSS Severity
CVSS v2 Score 4.3
References
- http://packetstormsecurity.org/0907-exploits/etraining-xss.txt
- http://www.securityfocus.com/bid/35834
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52072
- http://packetstormsecurity.org/0907-exploits/etraining-xss.txt
- http://www.securityfocus.com/bid/35834
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52072
Products affected by CVE-2009-3513
-
cpe:2.3:a:pilotgroup:pg_etraining:*