NVD

Id
50714  
Name
CVE-2009-3513  
Description
Multiple cross-site scripting (XSS) vulnerabilities in Pilot Group (PG) eTraining allow remote attackers to inject arbitrary web script or HTML via (1) the cat_id parameter to courses_login.php, the id parameter to (2) news_read.php or (3) lessons_login.php, or (4) the cur parameter in a start action to lessons_login.php.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2009-10-01  
Modified Date
2009-10-02  
Seq
2009-3513  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
256246 50714 CVE-2009-3513 http://packetstormsecurity.org/0907-exploits/etraining-xss.txt  View
256247 50714 CVE-2009-3513 35834  View
256248 50714 CVE-2009-3513 etraining-multiple-xss(52072)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
45369 JVNDB-2009-006376 PG eTraining におけるクロスサイトスクリプティングの脆弱性 Pilot Group (PG) eTraining には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2009-3513 40944 CVE-2009-3513 50714 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-006376.html 2009-10-01 2012-12-20 View