6
CVSSv2

CVE-2013-3601

Published: 06/09/2013 Updated: 30/09/2013
CVSS v2 Base Score: 6 | Impact Score: 6.4 | Exploitability Score: 6.8
VMScore: 534
Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P

Vulnerability Summary

Coursemill Learning Management System (LMS) 6.6 does not properly restrict JSP function calls, which allows remote authenticated users to perform arbitrary JSP operations by leveraging the Student role and providing an op parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

trivantis coursemill learning management system 6.6