CVE

Id
40948  
CVE No.
CVE-2009-3513  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Pilot Group (PG) eTraining allow remote attackers to inject arbitrary web script or HTML via (1) the cat_id parameter to courses_login.php, the id parameter to (2) news_read.php or (3) lessons_login.php, or (4) the cur parameter in a start action to lessons_login.php.  
Phase
Assigned (20091001)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
448394 40948 CVE-2009-3513 MISC:http://packetstormsecurity.org/0907-exploits/etraining-xss.txt  View
448395 40948 CVE-2009-3513 BID:35834  View
448396 40948 CVE-2009-3513 URL:http://www.securityfocus.com/bid/35834  View
448397 40948 CVE-2009-3513 XF:etraining-multiple-xss(52072)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41188 JVNDB-2009-002195 IBM AIX の nfs.ext における NFSv4 共有のアクセス制限を回避される脆弱性 IBM AIX の nfs.ext には、nfs_portmon 設定を適切に使用しないため、NFSv4 共有のアクセス制限を回避される脆弱性が存在します。 CVE-2009-3517 40948 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002195.html  View