CVE-2009-3513

Multiple cross-site scripting (XSS) vulnerabilities in Pilot Group (PG) eTraining allow remote attackers to inject arbitrary web script or HTML via (1) the cat_id parameter to courses_login.php, the id parameter to (2) news_read.php or (3) lessons_login.php, or (4) the cur parameter in a start action to lessons_login.php.

CVSS v2.0

4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

1.50% chance of exploitation in the next 30 days, 73th percentile

Published

2009-10-01

Updated

2024-08-07

ExploitDB entries (3)

• https://www.exploit-db.com/exploits/33121
• https://www.exploit-db.com/exploits/33120
• https://www.exploit-db.com/exploits/33119

References

• CVE Record
• NVD entry

Related

• CVE-2009-3512
• CVE-2009-3514
• CVE-2009-3511
• CVE-2009-3515
• CVE-2009-3510
• CVE-2009-3518