RSS   Vulnerabilities for 'Pg etraining'   RSS

2009-10-01
 
CVE-2009-3513

CWE-79
 

 
Multiple cross-site scripting (XSS) vulnerabilities in Pilot Group (PG) eTraining allow remote attackers to inject arbitrary web script or HTML via (1) the cat_id parameter to courses_login.php, the id parameter to (2) news_read.php or (3) lessons_login.php, or (4) the cur parameter in a start action to lessons_login.php.

 

 >>> Vendor: Pilotgroup 4 Products
Pg job site pro
Pg etraining
Elms pro
Allsharevideo


Copyright 2020, cxsecurity.com

 

Back to Top